CVE-2020-1094

An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka ‘Windows Work Folder Service Elevation of Privilege Vulnerability’.

Recent assessments:

bac2binary at April 15, 2020 4:47pm UTC reported:

The attack complexity is very less, as the attacker needs to run a specially crafted application, either by gaining physical access or by social engineering in order to exploit this.

Patch: Released by Microsoft.

Assessed Attacker Value: 1
Assessed Attacker Value: 1Assessed Attacker Value: 2