CVE-2020-1120HighCVSS 7.1

Connected User Experiences and Telemetry Service Denial of Service Vulnerability

Published
June 9, 2020
Last Modified
—

🔗 CVE IDs covered (1)

📋 Description

A denial of service vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations. An attacker who successfully exploited this vulnerability could cause a system to stop responding. To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability. The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service handles file operations.

🎯 Affected products4

  • Windows 10 Version 2004 for 32-bit Systems
  • Windows 10 Version 2004 for ARM64-based Systems
  • Windows 10 Version 2004 for x64-based Systems
  • Windows Server, version 2004 (Server Core installation)

✅ Remediation

KB4557957 (Security Update)

🔗 References (2)