CVE-2020-0638KEV · OVERDUECWE-59

Microsoft Update Notification Manager Privilege Escalation Vulnerability

High · published January 15, 2020

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 7.8. It is confirmed in active exploitation. It sits in the 83.7th percentile for exploit probability.

1593
days past CISA
deadline
CVSS v3.1
7.8
EPSS
2%
Percentile
83.7
In the wild
Confirmed
What it is

⚡ An elevation of privilege flaw hides in the Update Notification Manager, waiting for an attacker to strike! 🚨 Think of this vulnerability like a sneaky elevator operator who lets unauthorized people access restricted floors, bypassing all security checks. Once they’re in, they can access anything on that floor, which is absolutely terrifying! If exploited, an attacker could elevate their privileges and gain deeper control of the system, potentially allowing them to install malicious software, access sensitive data, or modify system settings. This could lead to a complete compromise of the system, making it highly vulnerable to further attacks or data breaches.

Put simply

Think of this vulnerability like a sneaky elevator operator who lets unauthorized people access restricted floors, bypassing all security checks. Once they’re in, they can access anything on that floor, which is absolutely terrifying! This vulnerability arises from the Update Notification Manager's mishandling of files, allowing an attacker who has already executed code on the system to gain elevated privileges. Essentially, it's a loophole in the management of update files, leading to broader access than intended.

What to do

If exploited, an attacker could elevate their privileges and gain deeper control of the system, potentially allowing them to install malicious software, access sensitive data, or modify system settings. This could lead to a complete compromise of the system, making it highly vulnerable to further attacks or data breaches. To mitigate this risk, ensure your systems are updated to the latest security patches. Regularly monitor for suspicious activity and restrict access to sensitive areas of the system. It's also key to review and tighten your user privileges to limit potential exploitation. 🔒 You've got this! By staying vigilant and proactive, you can secure your systems and keep the bad guys at bay! 🛡️

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02370 · 83.7th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2020-01-15T04:15Z
KEV added
2022-05-23 · due 2022-06-13
Affected products (17)
ProductVersionsFixed in
microsoft/windows_10_1709all versions—
microsoft/windows_10_1709all versions—
microsoft/windows_10_1803all versions—
microsoft/windows_10_1803all versions—
microsoft/windows_10_1809all versions—
microsoft/windows_10_1809all versions—
microsoft/windows_10_1809all versions—
microsoft/windows_10_1903all versions—
microsoft/windows_10_1903all versions—
microsoft/windows_10_1903all versions—
microsoft/windows_10_1909all versions—
microsoft/windows_10_1909all versions—
microsoft/windows_10_1909all versions—
microsoft/windows_server_1803all versions—
microsoft/windows_server_1903all versions—
microsoft/windows_server_1909all versions—
microsoft/windows_server_2019all versions—
References (3)
EPSS history
Timeline
  • 23 MAY 00:00Z
    Added to CISA KEV — remediate by Jun 13
    kev
  • 14 JAN 23:11Z
    An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first…
    cvelistv5