CVE-2020-16928: 
vulnerability analysis and mitigation

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles certain files. The vulnerability, identified as CVE-2020-16928, was disclosed in October 2020 as part of Microsoft's monthly security updates (CVE Details).

The vulnerability affects Microsoft Office Click-to-Run (C2R) components and requires user interaction to be exploited. The vulnerability has been assigned a CVSS base score of 9.3, indicating a critical severity level (Qualys Alert).

If successfully exploited, this vulnerability could allow an attacker to elevate privileges on the affected system. The vulnerability requires user interaction, specifically opening a specially crafted file, to be exploited (CVE Details).

To exploit this vulnerability, an attacker would need to convince a user to open a specially crafted file. The attack requires user interaction and cannot be executed remotely without user involvement (CVE Details).

Microsoft has released a security update that addresses the vulnerability by correcting how Microsoft Office Click-to-Run (C2R) components handle these files. Users are advised to apply the security update to mitigate this vulnerability (CVE Details).