<p>An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.</p> <p>To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application.</p> <p>The security update addresses the vulnerability by ensuring the StartTileData.dll properly handles this type of function.</p>
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Msft | — | 2020-09 Cumulative Update for Windows Server, version 2004 for x64-based Systems (KB4571756)2020-09 Cumulative Update for Windows Server, version 1903 for x64-based Systems (KB4574727)2020-09 Cumulative Update for Microsoft Windows 10, version 1909 (KB4574727)2020-09 Cumulative Update for Windows Server, version 1909 for x64-based Systems (KB4574727)2020-09 Cumulative Update for Microsoft Windows 10, version 2004 (KB4571756)2020-09 Cumulative Update for Microsoft Windows 10, version 1903 (KB4574727) | Sep 8, 2020 | Sep 8, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub