Rewterz
Rewterz Threat Advisory – CVE-2020-8758 – Security Updates for Intel AMT and Intel ISM
September 9, 2020
Rewterz
Rewterz Threat Advisory – CVE-2020-1250 – Win32k Information Disclosure Vulnerability
September 10, 2020

Rewterz Threat Advisory – CVE-2020-16851 – OneDrive for Windows Elevation of Privilege Vulnerability

Severity

High

Analysis Summary

An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and delete a targeted file with an elevated status.

Impact

Privilege Elevation

Remediation

Refer to Microsoft advisory for the complete list of affected products and their respective patches.

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16851