Vulnerability Details : CVE-2020-17136

Public exploit exists!
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Published 2020-12-10 00:15:16
Updated 2023-12-30 00:15:15
Source Microsoft Corporation
View at NVD,   CVE.org
Vulnerability category: Gain privilege

Products affected by CVE-2020-17136

Exploit prediction scoring system (EPSS) score for CVE-2020-17136

EPSS FAQ
78.33%
Probability of exploitation activity in the next 30 days EPSS Score History
~ 99 %
Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2020-17136

  • CVE-2020-1170 Cloud Filter Arbitrary File Creation EOP
    Disclosure Date: 2020-03-10
    First seen: 2021-01-12
    exploit/windows/local/cve_2020_17136
    The Cloud Filter driver, cldflt.sys, on Windows 10 v1803 and later, prior to the December 2020 updates, did not set the IO_FORCE_ACCESS_CHECK or OBJ_FORCE_ACCESS_CHECK flags when calling FltCreateFileEx() and FltCreateFileEx2() within its HsmpOpCreatePlaceholders()

CVSS scores for CVE-2020-17136

Base Score Base Severity CVSS Vector Exploitability Score Impact Score Score Source First Seen
4.6
 MEDIUM AV:L/AC:L/Au:N/C:P/I:P/A:P
3.9
6.4
 NIST
7.8
 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1.8
5.9
 NIST
7.8
 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1.8
5.9
 Microsoft Corporation

References for CVE-2020-17136

Jump to
This web site uses cookies for managing your session, storing preferences, website analytics and additional purposes described in our privacy policy.
By using this web site you are agreeing to CVEdetails.com terms of use!
Accept Close