Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2020-1571

Windows Setup Elevation of Privilege Vulnerability

Description

An elevation of privilege vulnerability exists in Windows Setup in the way it handles permissions. A locally authenticated attacker could run arbitrary code with elevated system privileges. After successfully exploiting the vulnerability, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. The security update addresses the vulnerability by ensuring Windows Setup properly handles permissions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows 10 Version 2004

  • N/Aaffected

Microsoft Windows 10 Version 1803

  • N/Aaffected

Microsoft Windows 10 Version 1809

  • N/Aaffected

Microsoft Windows 10 Version 1909

  • N/Aaffected

Microsoft Windows 10 Version 1903 for 32-bit Systems

  • N/Aaffected

Microsoft Windows 10 Version 1903 for x64-based Systems

  • N/Aaffected

Microsoft Windows 10 Version 1903 for ARM64-based Systems

  • N/Aaffected

References