Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2020-1084

Connected User Experiences and Telemetry Service Denial of Service Vulnerability

Description

A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain function values. An attacker who successfully exploited this vulnerability could deny dependent security feature functionality. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service validates certain function values.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows 10 Version 1507

  • 10.0.10240.0 to < publicationaffected

Microsoft Windows 10 Version 1607

  • 10.0.14393.0 to < publicationaffected

Microsoft Windows 10 Version 1709

  • 10.0.0 to < publicationaffected

Microsoft Windows 10 Version 1709 for 32-bit Systems

  • 10.0.0 to < publicationaffected

Microsoft Windows 10 Version 1803

  • 10.0.0 to < publicationaffected

Microsoft Windows 10 Version 1809

  • 10.0.17763.0 to < publicationaffected

Microsoft Windows 10 Version 1809

  • 10.0.0 to < publicationaffected

Microsoft Windows 10 Version 1903 for 32-bit Systems

  • 10.0.0 to < publicationaffected

Microsoft Windows 10 Version 1903 for ARM64-based Systems

  • 10.0.0 to < publicationaffected

Microsoft Windows 10 Version 1903 for x64-based Systems

  • 10.0.0 to < publicationaffected

Microsoft Windows 10 Version 1909

  • 10.0.0 to < publicationaffected

Microsoft Windows Server 2016

  • 10.0.14393.0 to < publicationaffected

Microsoft Windows Server 2016 (Server Core installation)

  • 10.0.14393.0 to < publicationaffected

Microsoft Windows Server 2019

  • 10.0.17763.0 to < publicationaffected

Microsoft Windows Server 2019 (Server Core installation)

  • 10.0.17763.0 to < publicationaffected

Microsoft Windows Server, version 1803 (Server Core Installation)

  • 10.0.0 to < publicationaffected

Microsoft Windows Server, version 1903 (Server Core installation)

  • 10.0.0 to < publicationaffected

Microsoft Windows Server, version 1909 (Server Core installation)

  • 10.0.0 to < publicationaffected

References