CVE-2020-1590

Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability

Medium · published September 11, 2020

CVSS v3.1
6.6
EPSS
1%
Percentile
57.4
In the wild
Unconfirmed
What it is

<p>An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system.</p>

<p>To exploit the vulnerability, an attacker would first have to gain execution on the victim system, then run a specially crafted application.</p>

<p>The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service handles file operations.</p>

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00837 · 57.4th percentile
Published
2020-09-11T17:09Z
EPSS history
Timeline
  • 11 SEP 17:09Z
    Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability
    cvelistv5