Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-0638

An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege Vulnerability'.

Published

2020-01-14T23:15:32.503

Last Modified

2025-04-08T16:00:35.440

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

6.4

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
  • Type: Secondary
    CWE-59
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System microsoft windows_10_1709 - Yes
Operating System microsoft windows_10_1709 - Yes
Operating System microsoft windows_10_1803 - Yes
Operating System microsoft windows_10_1803 - Yes
Operating System microsoft windows_10_1809 - Yes
Operating System microsoft windows_10_1809 - Yes
Operating System microsoft windows_10_1809 - Yes
Operating System microsoft windows_10_1903 - Yes
Operating System microsoft windows_10_1903 - Yes
Operating System microsoft windows_10_1903 - Yes
Operating System microsoft windows_10_1909 - Yes
Operating System microsoft windows_10_1909 - Yes
Operating System microsoft windows_10_1909 - Yes
Operating System microsoft windows_server_1803 - Yes
Operating System microsoft windows_server_1903 - Yes
Operating System microsoft windows_server_1909 - Yes
Operating System microsoft windows_server_2019 - Yes
References