PT-2026-112409

Name of the Vulnerable Software and Affected Versions Windows Update Orchestrator Service affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to disclose information locally. Recommendations At the...

Windows Update Orchestrator Unauthorized Access

The vulnerability of the Windows Update Orchestrator service on Windows operating systems relates to the disclosure of information. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to protected information...

Windows Update Orchestrator Service Information Disclosure Vulnerability

...

CVE-2023-32041: Use of Uninitialized Resource

Windows Update Orchestrator Service Information Disclosure Vulnerability...

Microsoft Windows Update Orchestrator Service security vulnerabilities

Microsoft Windows Update Orchestrator is a software for scheduling Windows updates from Microsoft USA. This service is responsible for downloading, installing and verifying updates for your computer. If stopped, your device will not be able to download and install the latest updates. A security...

Windows Update Orchestrator Service Privilege Escalation

The vulnerability of the Windows Update Orchestrator Service component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2020-17074

Windows Update Orchestrator Service Elevation of Privilege Vulnerability...

CVE-2020-17073

Windows Update Orchestrator Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows Update Orchestrator Service Elevation of Privilege Vulnerability...

CVE-2020-17076 Windows Update Orchestrator Service Elevation of Privilege Vulnerability

...

CVE-2020-17074 Windows Update Orchestrator Service Elevation of Privilege Vulnerability

...

CVE-2020-17073 Windows Update Orchestrator Service Elevation of Privilege Vulnerability

...

CVE-2020-17076: Undefined Security Weakness

Windows Update Orchestrator Service Elevation of Privilege Vulnerability...

CVE-2020-17073: Undefined Security Weakness

Windows Update Orchestrator Service Elevation of Privilege Vulnerability...

CVE-2020-17074: Undefined Security Weakness

Windows Update Orchestrator Service Elevation of Privilege Vulnerability...

PT-2020-4823 · Microsoft · Windows Update Orchestrator Service +1

Name of the Vulnerable Software and Affected Versions: Windows Update Orchestrator Service affected versions not specified Description: The issue is related to insufficient access control in the Windows Update Orchestrator Service component of the Windows operating system. Exploitation of this...

PT-2020-4684 · Microsoft · Windows Update Orchestrator Service +1

Name of the Vulnerable Software and Affected Versions: Windows Update Orchestrator Service affected versions not specified Description: The issue is related to errors in security settings, allowing an attacker to elevate their privileges. This can affect the system, potentially leading to...

Microsoft Windows Update Orchestrator Unchecked ScheduleWork Call

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/common' require 'msf/core/post/file' require 'msf/core/post/windows/priv' require 'msf/core/exploit/exe' require 'msf/core/post/windows/registry'...

CVE-2020-1313

An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'...

CVE-2020-1313

An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'...