Vulnerability identifier: #VU25157

Vulnerability risk: Low

CVSSv3.1: 7.5 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2020-0668

CWE-ID: CWE-119

Exploitation vector: Local

Exploits in database: 7

• October 29, 2021
  • CVE-2020-0668 (Make CVE-2020-0668 exploit work for version < win10 v1903 and version >= win10 v1903) [Github]
• June 3, 2020
  • CVE-2020-0668 (Use CVE-2020-0668 to perform an arbitrary privileged file move operation.) [Github]
• May 11, 2020
  • Service Tracing Privilege Escalation [Packet Storm]
  • Service Tracing Privilege Elevation Vulnerability [Metasploit]
• March 18, 2020
  • cve_2020_0668 (cve_2020_0668) [Github]
  • SysTracingPoc (CVE-2020-0668 - Microsoft Windows Service Tracing Arbitrary File Move Local Privilege Escalation Vulnerability) [Github]
  • CVE-2020-0668 (CVE-2020-0668) [Github]

Impact: Code execution

Vulnerable software:
Windows
Operating systems & Components / Operating system
Windows Server
Operating systems & Components / Operating system

Vendor: Microsoft