An elevation of privilege vulnerability exists when the Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system. To exploit the vulnerability, an attacker would first have to gain execution on the victim system, then run a specially crafted application. The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service handles file operations.

ID	Name	Product	Family	Severity
140416	KB4574727: Windows 10 Version 1903 and Windows 10 Version 1909 September 2020 Security Update	Nessus	Windows : Microsoft Bulletins	high
140415	KB4571756: Windows 10 Version 2004 September 2020 Security Update	Nessus	Windows : Microsoft Bulletins	high
140414	KB4570333: Windows 10 Version 1809 and Windows Server 2019 September 2020 Security Update	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2020-1590

high

Tenable Plugins

high

high

high