CVE-2020-16895: 
vulnerability analysis and mitigation

CVE-2020-16895 is an elevation of privilege vulnerability that exists in the Windows Error Reporting manager when it improperly handles process crashes. The vulnerability was disclosed and assigned on August 4, 2020, affecting various versions of Microsoft Windows including Windows 10 (versions 1803, 1809, 1903, 1909, 2004) and Windows Server 2016 (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a base score of 7.2 (HIGH) with the vector (AV:L/AC:L/Au:N/C:C/I:C/A:C). The vulnerability is classified under CWE-755 (Improper Handling of Exceptional Conditions) (NVD).

When successfully exploited, this vulnerability allows an attacker to delete targeted files and gain elevated status on the affected system. The vulnerability could potentially lead to complete system compromise with high impacts on confidentiality, integrity, and availability (NVD).

To exploit this vulnerability, an attacker must first have the ability to log into the system. Once logged in, they could run a specially crafted application that exploits the vulnerability to take control of an affected system. The attack complexity is considered low, requiring local access and low privileges (NVD).

Microsoft has released a security update that addresses the vulnerability by correcting how Windows Error Reporting manager handles process crashes. Users are advised to apply the available security patches to mitigate this vulnerability (Microsoft Advisory).