CVE-2020-0733 : Security Advisory and Response

Windows Malicious Software Removal Tool (MSRT) Elevation of Privilege Vulnerability

Understanding CVE-2020-0733

An elevation of privilege vulnerability in the Windows Malicious Software Removal Tool (MSRT) allows attackers to exploit junction handling.

What is CVE-2020-0733?

This CVE identifies a vulnerability in the Windows Malicious Software Removal Tool that could be exploited by an attacker already with execution on a victim's system.

The Impact of CVE-2020-0733

The vulnerability could lead to an elevation of privilege, allowing malicious actors to potentially gain higher system access.

Technical Details of CVE-2020-0733

Vulnerability Description

An elevation of privilege vulnerability is present in the way the MSRT handles junctions.

Affected Systems and Versions

Windows Malicious Software Removal Tool 32-bit and 64-bit are affected, with unspecified versions.

Exploitation Mechanism

Attackers need prior execution on the victim's system to exploit this vulnerability.

Mitigation and Prevention

Immediate Steps to Take

Apply patches or security updates from Microsoft promptly.
Monitor system logs for any unusual activities that could indicate exploitation.

Long-Term Security Practices

Regularly update and patch all software and operating systems to mitigate future vulnerabilities.
Implement least privilege access to limit attackers' capabilities even if they gain initial access.

Patching and Updates

Microsoft may release updates addressing this vulnerability; ensure to install them as soon as they are available.