CVE-2020-16972

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Windows Backup Service handles file operations.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Oct 16, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-169737.8An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this CVE-2020-169747.8An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this CVE-2020-169757.8An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this CVE-2020-169767.8An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this CVE-2020-169777.0A remote code execution vulnerability exists in Visual Studio Code when the Python extension loads a Jupyter notebook file. An attacker w CVE-2020-169785.4A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web CVE-2020-169795.3Microsoft SharePoint Information Disclosure Vulnerability CVE-2020-16985.5A flaw was found in keycloak in versions before 9.0.0. A logged exception in the HttpMethod class may leak the password given as parameter. CVE-2020-169807.8An elevation of privilege vulnerability exists when the Windows iSCSI Target Service improperly handles file operations. An attacker who CVE-2020-169816.1Azure Sphere Elevation of Privilege Vulnerability CVE-2020-169826.1Azure Sphere Unsigned Code Execution Vulnerability CVE-2020-169835.7Azure Sphere Tampering Vulnerability