CVE Vulnerabilities

CVE-2020-0657

Published: Feb 11, 2020 | Modified: Nov 21, 2024
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka Windows Common Log File System Driver Elevation of Privilege Vulnerability.

Affected Software

NameVendorStart VersionEnd Version
Windows_10Microsoft- (including)- (including)
Windows_10Microsoft1607 (including)1607 (including)
Windows_10Microsoft1709 (including)1709 (including)
Windows_10Microsoft1803 (including)1803 (including)
Windows_10Microsoft1809 (including)1809 (including)
Windows_10Microsoft1903 (including)1903 (including)
Windows_10Microsoft1909 (including)1909 (including)
Windows_7Microsoft–sp1 (including)–sp1 (including)
Windows_8.1Microsoft- (including)- (including)
Windows_rt_8.1Microsoft- (including)- (including)
Windows_server_2008Microsoft–sp2 (including)–sp2 (including)
Windows_server_2008Microsoftr2-sp1 (including)r2-sp1 (including)
Windows_server_2012Microsoft- (including)- (including)
Windows_server_2012Microsoftr2 (including)r2 (including)
Windows_server_2016Microsoft- (including)- (including)
Windows_server_2016Microsoft1803 (including)1803 (including)
Windows_server_2016Microsoft1903 (including)1903 (including)
Windows_server_2016Microsoft1909 (including)1909 (including)
Windows_server_2019Microsoft- (including)- (including)

References