CVE-2020-16955

CVE-2020-16955 is an elevation-of-privilege vulnerability in Microsoft Office Click-to-Run (C2R) AppVLP, caused by how C2R handles certain files. An attacker could exploit this by convincing a user to open a specially crafted file to gain higher privileges. The vulnerability affects Microsoft Off...