CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-01-14
Windows Update Notification Manager Elevation of Privilege Vulnerability (CVE-2020-0638) Analysis & Mitigation Guide
[Affected Scope] Update Notification Manager service running on Windows 10 and Windows Server operating systems
[Impact] A local attacker can exploit symbolic link creation to overwrite system files, leading to arbitrary code execution with SYSTEM privileges
[Mitigation] Apply the official Microsoft cumulative security updates immediately, or disable associated scheduled tasks as a temporary workaround