VDB
CVE-2020-0942
CVE-2020-0942
PUBLISHED
Reported by microsoft · Published April 15, 2020
An elevation of privilege vulnerability exists when Connected User Experiences and Telemetry Service improperly handles file operations, aka 'Connected User Experiences and Telemetry Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0944, CVE-2020-1029.
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows | 10 Version 1803 for 32-bit Systems, 10 Version 1803 for x64-based Systems, 10 Version 1803 for ARM64-based Systems |
| Microsoft | Windows Server | version 1803 (Core Installation), 2019, 2019 (Core installation) |
| Microsoft | Windows 10 Version 1909 for 32-bit Systems | unspecified |
| Microsoft | Windows 10 Version 1909 for x64-based Systems | unspecified |
| Microsoft | Windows 10 Version 1909 for ARM64-based Systems | unspecified |
| Microsoft | Windows Server, version 1909 (Server Core installation) | unspecified |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | unspecified |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | unspecified |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | unspecified |
| Microsoft | Windows Server, version 1903 (Server Core installation) | unspecified |
| Microsoft | Windows Server, version 1903 (Server Core installation) | * |
| Microsoft | Windows Server, version 1909 (Server Core installation) | * |
| Microsoft | Windows 10 Version 1909 for ARM64-based Systems | * |
| Microsoft | Windows 10 Version 1909 for x64-based Systems | * |
| Microsoft | Windows | * |
| Microsoft | Windows 10 Version 1909 for 32-bit Systems | * |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | * |
| Microsoft | Windows Server | 2016, *, 2019 |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | * |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | * |
Timeline
- Jan 21, 2020 PoC Published (16 in total, the first dated here)
- Apr 15, 2020 CVE Published
- Apr 14, 2021 EPSS Score (30 in total, the first dated here)
- Mar 30, 2026 Security Advisory (4 in total, the first dated here)
- Sep 6, 2026 Coalition ESS Score
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2020-0942
vulnetix vdb fixes CVE-2020-0942Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2020-0942/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart