mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-31 01:49:30 +02:00
marc
1.7 KiB
1.7 KiB
CVE-2020-16908
Description
An elevation of privilege vulnerability exists in Windows Setup in the way it handles directories.
A locally authenticated attacker could run arbitrary code with elevated system privileges. After successfully exploiting the vulnerability, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
The security update addresses the vulnerability by ensuring Windows Setup properly handles directories.
POC
Reference
No PoCs from references.