README_EN.md

CVE-2020-1313

Describe

An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows Update Orchestrator Service Elevation of Privilege Vulnerability'.

ImpactVersion

Product	Version	Update	Edition	Tested
Windows 10	X86/x64/ARM64	1903
Windows 10	X86/x64/ARM64	1909		✔
Windows 10	X86/x64/ARM64	2004
Windows Server		1903
Windows Server		1909
Windows Server		2004

Patch

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1313

Utilization

CompilerEnvironment

• VS2019（V141）X64 Release

Test Machine Windows 10 1909 x64 as shown

Analyze

• https://cloud.tencent.com/developer/article/1683124

ProjectSource

• irsl