4.3
CVSSv2

CVE-2020-16910

Published: 16/10/2020 Updated: 21/10/2020
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an malicious user to create files in a protected Unified Extensible Firmware Interface (UEFI) location.To exploit this vulnerability, an attacker could run a specially crafted application to bypass Unified Extensible Firmware Interface (UEFI) variable security in Windows.The security update addresses the vulnerability by correcting security feature behavior to enforce permissions., aka 'Windows Security Feature Bypass Vulnerability'.

Vulnerability Trend