First published: Wed Nov 11 2020(Updated: )
Windows Update Orchestrator Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17073, CVE-2020-17074.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Windows 10 | =20h2 | |
Windows 10 | =1903 | |
Windows 10 | =1909 | |
Windows 10 | =2004 | |
Microsoft Windows Server 2016 | =20h2 | |
Microsoft Windows Server 2016 | =1903 | |
Microsoft Windows Server 2016 | =1909 | |
Microsoft Windows Server 2016 | =2004 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-17076 is rated as important by Microsoft due to its potential for elevation of privilege.
To mitigate CVE-2020-17076, apply the latest security updates provided by Microsoft for affected Windows and Windows Server versions.
CVE-2020-17076 affects Windows 10 versions 20H2, 1903, 1909 and Windows Server 2016 versions 20H2, 1903, 1909, and 2004.
CVE-2020-17076 is classified as an elevation of privilege vulnerability in the Windows Update Orchestrator Service.
CVE-2020-17076 requires local access to the system, meaning it cannot be exploited remotely without local user credentials.