CyberSec.Space Logo
Back to CVE Browser

CVE-2020-0638

Known Exploited (CISA KEV)HIGH
7.8
CVSS Severity Score
EPSS Score40.0140%
EPSS Percentile97.33th
PublishedJan 14, 2020
Last ModifiedOct 29, 2025

Vulnerability Description

An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege Vulnerability'.

Affected Platforms (CPE)

💻
Microsoft

Windows 10 1709

All versions
💻
Microsoft

Windows 10 1709

All versions
💻
Microsoft

Windows 10 1803

All versions
💻
Microsoft

Windows 10 1803

All versions
💻
Microsoft

Windows 10 1809

All versions
💻
Microsoft

Windows 10 1809

All versions
💻
Microsoft

Windows 10 1809

All versions
💻
Microsoft

Windows 10 1903

All versions
💻
Microsoft

Windows 10 1903

All versions
💻
Microsoft

Windows 10 1903

All versions
💻
Microsoft

Windows 10 1909

All versions
💻
Microsoft

Windows 10 1909

All versions
💻
Microsoft

Windows 10 1909

All versions
💻
Microsoft

Windows Server 1803

All versions
💻
Microsoft

Windows Server 1903

All versions
💻
Microsoft

Windows Server 1909

All versions
💻
Microsoft

Windows Server 2019

All versions

References & Advisories

🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0638
🔗 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0638
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0638

Related Vulnerabilities

CVE-2017-118999.8

Device Guard in Windows 10 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows a security featu...

CVE-2017-119407.8

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windo...

CVE-2017-118477.8

Windows kernel in Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and RT1, Windows Server 2012 and R2, Windows 10 G...

CVE-2017-119377.8

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windo...