VYPR
← All advisories
High severity7.8CISA KEVNVD Advisory· Published Jan 14, 2020· Updated Aug 12, 2026

CVE-2020-0638

CVE-2020-0638

Description

An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege Vulnerability'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

28
  • Microsoft/Windows 10 17092 versions
    cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:*
  • Microsoft/Windows 10 18032 versions
    cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:*
  • Microsoft/Windows 10 18093 versions
    cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*+ 2 more
    • cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*
  • Microsoft/Windows 10 19033 versions
    cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*+ 2 more
    • cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x86:*
  • Microsoft/Windows 10 19093 versions
    cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:arm64:*+ 2 more
    • cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:arm64:*
    • cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x86:*
  • Microsoft/Windows Server 1803
    cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:*:*
  • Microsoft/Windows Server 1903
    cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:*:*
  • Microsoft/Windows Server 1909
    cpe:2.3:o:microsoft:windows_server_1909:-:*:*:*:*:*:*:*
  • Microsoft/Windows Server 2019
    cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
  • Microsoft/Update Notification Managerllm-fuzzy
  • Microsoft/Windows 10 Version 1903 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for ARM64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1909 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1909 for ARM64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1909 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows Server 2003cpe-rescue
    Range: 2019
  • Microsoft/Windows Server, version 1903 (Server Core installation)v5
    Range: unspecified
  • Microsoft/Windows Server, version 1909 (Server Core installation)v5
    Range: unspecified
  • Microsoft/Windowsv5
    Range: 10 Version 1709 for 32-bit Systems

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.