CVE-2020-17162

EUVD-2020-9116
Microsoft Windows Security Feature Bypass Vulnerability
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
microsoftCNA
8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 93%
Affected Products (NVD)
VendorProductVersion
microsoftwindows_10
-
microsoftwindows_8.1
-
microsoftwindows_rt_8.1
-
microsoftwindows_server_2012
-
microsoftwindows_server_2016
-
microsoftwindows_server_2019
-
𝑥
= Vulnerable software versions
Windows Releases
Platform
Version
Windows 10
(x64, x86)
KB4577049
1607 (x64, x86)
KB4577015
1803 (arm64, x64, x86)
KB4577032
1809 (arm64, x64, x86)
KB4570333
1903 (arm64, x64, x86)
KB4574727
1909 (arm64, x64, x86)
KB4574727
2004 (arm64, x64, x86)
KB4571756
Windows 8.1
(x64, x86)
KB4577071
Windows RT 8.1
All
KB4577066
Windows Server
1903 Server Core
KB4574727
1909 Server Core
KB4574727
2004 Server Core
KB4571756
Windows Server 2012
Server Core
KB4577048
Standard
KB4577048
Windows Server 2012 R2
Server Core
KB4577071
Standard
KB4577071
Windows Server 2016
Server Core
KB4577015
Standard
KB4577015
Windows Server 2019
Server Core
KB4570333
Standard
KB4570333
References
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17162
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17162