Описание
Windows Upgrade Assistant Remote Code Execution Vulnerability
FAQ
How could an attacker exploit this vulnerability?
The attacker would need to trick or coerce a legitimate user into downloading and executing a specially crafted install file
How do I get the update?
The Windows Upgrade Assistant for Windows 10 will automatically install the fix when you navigate to https://www.microsoft.com/software-download/windows10 and click Update Now.
Обновления
| Продукт | Статья | Обновление |
|---|---|---|
| Windows Upgrade Assistant |
Показывать по
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
Older Software Release
EPSS
7.8 High
CVSS3
Связанные уязвимости
Windows Upgrade Assistant Remote Code Execution Vulnerability
Windows Upgrade Assistant Remote Code Execution Vulnerability.
Уязвимость программного средства работы с обновлениями Windows Upgrade Assistant, связанная с недостаточной проверкой вводимых данных, позволяющая нарушителю выполнить произвольный код
EPSS
7.8 High
CVSS3