Beveiligingsadvies

CVE-2020-16902

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-10-16 22:17:42
Laatst bijgewerkt 2024-08-04 13:45:33
Toegewezen door microsoft
CVSS-score 7.8
Status PUBLISHED

Beschrijving

<p>An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.</p> <p>A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>The security update addresses the vulnerability by correcting the input sanitization error to preclude unintended elevation.</p>