CVE-2020-16887

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

<p>An elevation of privilege vulnerability exists in the way that the Windows Network Connections Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p> <p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p> <p>The security update addresses the vulnerability by ensuring the Windows Network Connections Service properly handles objects in memory.</p>

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Oct 16, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-168895.5<p>An information disclosure vulnerability exists when the Windows KernelStream improperly handles objects in memory. An attacker who succesCVE-2020-16896.5On Juniper Networks EX4300-MP Series, EX4600 Series and QFX5K Series deployed in a Virtual Chassis configuration, receipt of a stream of speCVE-2020-168907.8<p>An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory. An attacker who succesCVE-2020-168918.8<p>A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticatedCVE-2020-168927.8<p>An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory. An attacker who succesCVE-2020-168947.7<p>A denial of service vulnerability exists when Windows Network Address Translation (NAT) on a host server fails to properly validate inputCVE-2020-168957.8<p>An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles a process crash. An attacker who sCVE-2020-168967.5<p>An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP CVE-2020-168975.5<p>An information disclosure vulnerability exists when NetBIOS over TCP (NBT) Extensions (NetBT) improperly handle objects in memory. An attCVE-2020-168988.8<p>A remote code execution vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attCVE-2020-168997.5<p>A denial of service vulnerability exists when the Windows TCP/IP stack improperly handles ICMPv6 Router Advertisement packets. An attackeCVE-2020-16906.5An improper authorization flaw was discovered in openstack-selinux's applied policy where it does not prevent a non-root user in a container
CVE-2020-16887: High severity, CVSS 7.8 | Vulnix