Windows Update Orchestrator Service Elevation of Privilege Vulnerability

🔗 CVE IDs covered (1)

🎯 Affected products15

• Windows 10 Version 1903 for 32-bit Systems
• Windows 10 Version 1903 for ARM64-based Systems
• Windows 10 Version 1903 for x64-based Systems
• Windows 10 Version 1909 for 32-bit Systems
• Windows 10 Version 1909 for ARM64-based Systems
• Windows 10 Version 1909 for x64-based Systems
• Windows 10 Version 2004 for 32-bit Systems
• Windows 10 Version 2004 for ARM64-based Systems
• Windows 10 Version 2004 for x64-based Systems
• Windows 10 Version 20H2 for 32-bit Systems
• Windows 10 Version 20H2 for ARM64-based Systems
• Windows Server, version 1903 (Server Core installation)
• Windows Server, version 1909 (Server Core installation)
• Windows Server, version 2004 (Server Core installation)
• Windows Server, version 20H2 (Server Core Installation)

✅ Remediation

KB4586786 (Security Update) KB4586781 (Security Update)

🔗 References (5)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17076
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4586786
• referencehttps://support.microsoft.com/help/4586786
• patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4586781
• referencehttps://support.microsoft.com/help/4586781