Windows Hard Link Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The security update addresses the vulnerability by correcting how Windows handles hard links.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

N/A

Microsoft Windows和Windows Server 安全漏洞

Microsoft Windows和Microsoft Windows Server都是美国微软（Microsoft）公司的产品。Microsoft Windows是一套个人设备使用的操作系统。Microsoft Windows Server是一套服务器操作系统。 Microsoft Windows和Windows Server中存在提权漏洞，该漏洞源于程序没有正确处理硬链接。攻击者可借助特制的应用程序利用该漏洞覆盖目标文件，提升权限。以下产品及版本受到影响：Windows 10，Windows 10 1

N/A

N/A