CVE-2020-0683

CVE Published 2020-02-11
Related Vendor(s) microsoft
Related Product(s) windows_8.1, windows_server_2008, windows_server_2012, windows_10, windows_server_2019, windows_server_2016, windows_7, windows_rt_8.1
Exploitation Reported (CISA KEV) 2021-11-03
CVSS 3 Base Score 7.8 (HIGH)
CVSS 3 Attack Complexity LOW
CVSS 3 Attack Vector LOCAL

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686.

Cyber Threat Graph Context

Explore how this CVE relates to the wider threat graph

References