Elevation of Privilege Vulnerability in Windows Malicious Software Removal Tool by Microsoft

CVE-2020-0733

Summary

An elevation of privilege vulnerability exists in the Windows Malicious Software Removal Tool (MSRT) due to improper handling of junctions. Successful exploitation allows an attacker to execute arbitrary code with elevated privileges on a target system, posing a significant security risk. To exploit this vulnerability, an attacker must first gain execution on the victim's system, making initial access crucial to the attack vector. This highlights the importance of maintaining robust security measures to detect and prevent unauthorized executable code from running.

References