CVE-2020-17076: Windows Update Orchestrator Service Elevation of Privilege Vulnerability
Published Nov 11, 2020
·Updated
Windows Update Orchestrator Service Elevation of Privilege Vulnerability This CVE ID is unique from CVE-2020-17073, CVE-2020-17074.
Affected Software
8 affected components
Microsoft Windows 10=20h2
Microsoft Windows 10=1903
Microsoft Windows 10=1909
Microsoft Windows 10=2004
Microsoft Windows Server 2016=20h2
Microsoft Windows Server 2016=1903
Microsoft Windows Server 2016=1909
Microsoft Windows Server 2016=2004
Remediation
Event History
Nov 11, 2020
CVE Published
06:48 AM
Data Sourced
06:48 AM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2020-17076?
CVE-2020-17076 is rated as important by Microsoft due to its potential for elevation of privilege.
2
How do I fix CVE-2020-17076?
To mitigate CVE-2020-17076, apply the latest security updates provided by Microsoft for affected Windows and Windows Server versions.
3
Which Windows versions are affected by CVE-2020-17076?
CVE-2020-17076 affects Windows 10 versions 20H2, 1903, 1909 and Windows Server 2016 versions 20H2, 1903, 1909, and 2004.
4
What type of vulnerability is CVE-2020-17076?
CVE-2020-17076 is classified as an elevation of privilege vulnerability in the Windows Update Orchestrator Service.
5
Can CVE-2020-17076 be exploited remotely?
CVE-2020-17076 requires local access to the system, meaning it cannot be exploited remotely without local user credentials.