CVE-2020-17103: microsoft windows_10 Improper Privilege Management
CVSS: 7.2v2.0HighModified
Published 09-12-2020Last modified 10-06-2026
Vulnerability summary
CVE-2020-17103 is a high (CVSS 7.2) Improper Privilege Management vulnerability in microsoft windows_10. EPSS estimates a 22.15% chance of exploitation in the next 30 days, higher than 97.6% of scored vulnerabilities.
CVSS score
7.2/10
010
High · v2.0 (NVD)EPSS score
22.15%
0%100%
High · -4.38 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 09-12-2020PublishedVulnerability first disclosed.
- 10-06-2026Last modifiedVulnerability information updated.
Description
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
CVSS metrics
3 scores · 2 sources · 2 versionsHigh 7.0Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:CSourcesAll 2 agree
- NVDNIST7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
High 7.2Preferred score · NVD (NIST)
AV:L/AC:L/Au:N/C:C/I:C/A:CSourcesSingle source
EPSS trend
Probability
22.15%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
-4.38 pp
From 26.53% on 20-09-2026
20-09-202620-10-2026
EPSS score22.15%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Microsoft11 products
- windows_10na | 20h2 | 1803 | 1809 | 1903 | 1909 | 2004
- windows 10 version 1809≥ 10.0.17763.0, < 10.0.17763.8880
- windows 11 version 23h2≥ 10.0.22631.0, < 10.0.22631.7219
- windows 11 version 24h2≥ 10.0.26100.0, < 10.0.26100.8655
- windows 11 version 25h2≥ 10.0.26200.0, < 10.0.26200.8655
1 vendor · 11 products
References
2 links
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17103X Refsource MISCX TransferredPatchVendor Advisory