mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-07 19:16:22 +00:00
1.7 KiB
1.7 KiB
CVE-2020-16908
Description
An elevation of privilege vulnerability exists in Windows Setup in the way it handles directories.
A locally authenticated attacker could run arbitrary code with elevated system privileges. After successfully exploiting the vulnerability, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
The security update addresses the vulnerability by ensuring Windows Setup properly handles directories.
POC
Reference
No PoCs from references.