Skip to main content
← All vulnerabilities
CVE-2020-17136

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Published
Last modified
published
Not listed in CISA KEV
Fix
Fix or patch referenced
1 Metasploit module, 2 proofs of concept on GitHub

Summary

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Timeline

  1. CVE published
  2. Record last updated
  3. EPSS reached 10%

    FIRST estimates at least a 10% chance of exploitation in the next 30 days

Affected versions

  • Microsoft Windows 10 Version 1803

    From 10.0.0

  • Microsoft Windows 10 Version 1809

    From 10.0.17763.0

  • Microsoft Windows 10 Version 1809

    From 10.0.0

  • Microsoft Windows 10 Version 1903 for 32-bit Systems

    From 10.0.0

  • Microsoft Windows 10 Version 1903 for ARM64-based Systems

    From 10.0.0

  • Microsoft Windows 10 Version 1903 for x64-based Systems

    From 10.0.0

  • Microsoft Windows 10 Version 1909

    From 10.0.0

  • Microsoft Windows 10 Version 2004

    From 10.0.0

  • Microsoft Windows 10 Version 20H2

    From 10.0.0

  • Microsoft Windows Server 2019

    From 10.0.17763.0

  • Microsoft Windows Server 2019 (Server Core installation)

    From 10.0.17763.0

  • Microsoft Windows Server version 2004

    From 10.0.0

  • Microsoft Windows Server version 20H2

    From 10.0.0

  • Microsoft Windows Server, version 1903 (Server Core installation)

    From 10.0.0

  • Microsoft Windows Server, version 1909 (Server Core installation)

    From 10.0.0

References 4

msrc.microsoft.com

GitHub · rapid7/metasploit-framework

GitHub · cssxn/CVE-2020-17136

GitHub · xyddnljydd/CVE-2020-17136