CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-02-11
Windows Installer Privilege Escalation via Symbolic Link Manipulation (CVE-2020-0683)
[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 containing the Windows Installer service
[Impact] Local attackers can exploit improper symbolic link handling in MSI packages to execute arbitrary code with SYSTEM privileges, leading to full host compromise
[Mitigation] Apply the official Microsoft security updates immediately and restrict non-admin MSI installation privileges as a temporary workaround