An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege Vulnerability'.
Advisories
Source ID Title
EUVD EUVD EUVD-2020-2132 An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege Vulnerability'.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 22 Oct 2025 09:15:00 +0900


Wed, 22 Oct 2025 05:30:00 +0900


Wed, 22 Oct 2025 04:30:00 +0900


Wed, 09 Apr 2025 01:30:00 +0900

Type Values Removed Values Added
First Time appeared Microsoft windows 10 1709
Microsoft windows 10 1803
Microsoft windows 10 1809
Microsoft windows 10 1903
Microsoft windows 10 1909
Microsoft windows Server 1803
Microsoft windows Server 1903
Microsoft windows Server 1909
CPEs cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:arm64:*
cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_1909:-:*:*:*:*:*:*:*
Vendors & Products Microsoft windows 10
Microsoft windows Server 2016
Microsoft windows 10 1709
Microsoft windows 10 1803
Microsoft windows 10 1809
Microsoft windows 10 1903
Microsoft windows 10 1909
Microsoft windows Server 1803
Microsoft windows Server 1903
Microsoft windows Server 1909

Sat, 08 Feb 2025 01:15:00 +0900

Type Values Removed Values Added
Weaknesses CWE-59
Metrics kev

{'dateAdded': '2022-05-23'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2025-10-21T23:35:53.819Z

Reserved: 2019-11-04T00:00:00.000Z

Link: CVE-2020-0638

cve-icon Vulnrichment

Updated: 2024-08-04T06:11:04.612Z

cve-icon NVD

Status : Analyzed

Published: 2020-01-14T23:15:32.503

Modified: 2025-10-29T14:33:40.940

Link: CVE-2020-0638

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses