March 22, 2024
Severity High Analysis Summary Ducktail Malware is a malicious program designed by hackers to infiltrate computers and networks globally. Ducktail malware is typically delivered through a […]
Rewterz Threat Advisory – CVE-2020-8758 – Security Updates for Intel AMT and Intel ISM
September 9, 2020
Rewterz Threat Advisory – CVE-2020-1250 – Win32k Information Disclosure Vulnerability
September 10, 2020
Rewterz Threat Advisory – CVE-2020-8758 – Security Updates for Intel AMT and Intel ISM
September 9, 2020
Rewterz Threat Advisory – CVE-2020-1250 – Win32k Information Disclosure Vulnerability
September 10, 2020
Severity
High
Analysis Summary
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and delete a targeted file with an elevated status.
Impact
Privilege Elevation
Remediation
Refer to Microsoft advisory for the complete list of affected products and their respective patches.
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16851