CVE-2020-16961: 
vulnerability analysis and mitigation

The Windows Backup Engine Elevation of Privilege Vulnerability (CVE-2020-16961) was identified and disclosed in December 2020. This vulnerability affects various versions of Microsoft Windows operating systems, including Windows 10 (multiple versions from 1607 to 20H2) and Windows 7 SP1 (NVD Database).

The vulnerability has received a CVSS v3.1 base score of 7.8 (High) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local access is required with low attack complexity. Under CVSS v2.0, it received a base score of 7.2 (High) with the vector (AV:L/AC:L/Au:N/C:C/I:C/A:C) (NVD Database).

The vulnerability could allow an attacker to gain elevated privileges on affected systems, potentially leading to complete system compromise with high impacts on confidentiality, integrity, and availability (NVD Database).

The vulnerability requires local access to exploit, with low attack complexity and no user interaction needed. No public exploits were confirmed at the time of disclosure (NVD Database).

Microsoft has released security updates to address this vulnerability. The fix is available through Windows Update and can be obtained by installing the relevant security patches for affected systems (Microsoft Advisory).