Windows Work Folder Service Elevation of Privilege Vulnerability

🗓️ 14 Apr 2020 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 21 Views

Windows Work Folder Service Elevation of Privilege Vulnerability. Improper file operation handling leading to elevated context exploit

Reporter	Title	Published	Views	Family All 37
ATTACKERKB	CVE-2020-1094	15 Apr 202000:00	–	attackerkb
Information Security Automation	Microsoft Patch Tuesday April 2020: my classification script, confusing RCE in Adobe Type Manager and updates for older vulnerabilities	26 Apr 202001:24	–	avleonov
BDU FSTEC	The vulnerability of the Work Folder Service in Windows operating systems allows a perpetrator to escalate their privileges.	19 May 202000:00	–	bdu_fstec
CVE	CVE-2020-1094	15 Apr 202015:13	–	cve
Cvelist	CVE-2020-1094	15 Apr 202015:13	–	cvelist
EUVD	EUVD-2020-11983	7 Oct 202500:30	–	euvd
Microsoft KB	April 14, 2020—KB4549951 (OS Builds 18362.778 and 18363.778) - EXPIRED	9 Jun 202007:00	–	mskb
Microsoft KB	April 14, 2020—KB4550922 (OS Build 17134.1425)	14 Apr 202007:00	–	mskb
Microsoft KB	April 14, 2020—KB4550927 (OS Build 16299.1806)	14 Apr 202007:00	–	mskb
Microsoft KB	April 14, 2020—KB4550929 (OS Build 14393.3630)	14 Apr 202007:00	–	mskb

Vulners

Node

microsoft windows_10_version_1709_for_32-bit_systems

OR

microsoft windows_server,_version_1909_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2_(server_core_installation)

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2012_r2

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1_(server_core_installation)

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_server_2008_r2_for_x64-based_systems_service_pack_1

OR

microsoft windows_rt_8.1

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_x64-based_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_8.1_for_32-bit_systems

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_7_for_x64-based_systems_service_pack_1

OR

microsoft windows_10_version_1903_for_arm64-based_systems

OR

microsoft windows_10_version_1903_for_x64-based_systems

OR

microsoft windows_10_version_1903_for_32-bit_systems

OR

microsoft windows_10_version_1709_for_arm64-based_systems

OR

microsoft windows_10_version_1709_for_x64-based_systems

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_7_for_32-bit_systems_service_pack_1

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_server,_version_1903_(server_core_installation)

OR

microsoft windows_10_version_1909_for_arm64-based_systems

OR

microsoft windows_10_version_1909_for_x64-based_systems

OR

microsoft windows_10_version_1909_for_32-bit_systems

OR

microsoft windows_server_2019_(server_core_installation)

OR

microsoft windows_server_2019

OR

microsoft windows_10_version_1809_for_arm64-based_systems

OR

microsoft windows_10_version_1809_for_x64-based_systems

OR

microsoft windows_10_version_1809_for_32-bit_systems

OR

microsoft windows_10_version_1803_for_arm64-based_systems

OR

microsoft windows_server,_version_1803_(server_core_installation)

OR

microsoft windows_10_version_1803_for_x64-based_systems

OR

microsoft windows_10_version_1803_for_32-bit_systems

14 Apr 2020 07:00Current

3.4Low risk

Vulners AI Score3.4

CVSS 27.2

CVSS 3.17.8

CVSS 37.8

EPSS0.00401

windows work folder service elevation of privilege vulnerability file operations exploit microsoft