CVE-2020-16912

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Windows Backup Service handles file operations.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Oct 16, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-169137.8An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory.CVE-2020-169145.5An information disclosure vulnerability exists in the way that the Windows Graphics Device Interface Plus (GDI+) handles objects in memor CVE-2020-169157.8A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully CVE-2020-169167.8An elevation of privilege vulnerability exists when Windows improperly handles COM object creation. An attacker who successfully exploite CVE-2020-169187.8A remote code execution vulnerability exists when the Base3D rendering engine improperly handles memory. An attacker who successfu CVE-2020-169195.5An information disclosure vulnerability exists when the Windows Enterprise App Management Service improperly handles certain file operati CVE-2020-16926.5Moodle before version 3.7.2 is vulnerable to information exposure of service tokens for users enrolled in the same course.CVE-2020-169207.8An elevation of privilege vulnerability exists when the Windows Application Compatibility Client Library improperly handles registry oper CVE-2020-169215.5An information disclosure vulnerability exists in Text Services Framework when it fails to properly handle objects in memory. An attacker CVE-2020-169225.3A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerabi CVE-2020-169237.8A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who succ CVE-2020-169247.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who s