An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka ‘Windows Backup Service Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2020-16912, CVE-2020-16936, CVE-2020-16973, CVE-2020-16974, CVE-2020-16975, CVE-2020-16976.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-16972
Reference (s):
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16972
- URL: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16972