Microsoft Update Notification Manager Privilege Escalation Vulnerability

[ Why it matters ]Priority signals

• Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2022-05-23
• Known to be used in ransomware campaigns

[ Description ]Official description

An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege Vulnerability'.

CISA: Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 13 Jun 2022): Apply updates per vendor instructions.

• Patch on portal.msrc.microsoft.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD

[ References ]References

• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0638PatchVendor Advisory
• www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource