← Back

CVE-2020-16877

nvd nist
Published: Oct 16, 2020Modified: Feb 23, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Exploitability: 1.8 / Impact: 5.2
Source: NVD (Secondary)

Description

<p>An elevation of privilege vulnerability exists when Microsoft Windows improperly handles reparse points. An attacker who successfully exploited this vulnerability could overwrite or delete a targeted file that would normally require elevated permissions.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and overwrite or delete files.</p> <p>The security update addresses the vulnerability by correcting how Windows handles reparse points.</p>

Affected (6)

2 products
Windows 10
Windows Server 2016
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Version 1903
Version 1909
Version 2004
Microsoft
Version 1903
Version 1909
Version 2004

References (2)

Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.