CVE-2020-17076: 
vulnerability analysis and mitigation

The Windows Update Orchestrator Service Elevation of Privilege Vulnerability (CVE-2020-17076) was identified and disclosed in November 2020. This vulnerability affects multiple versions of Microsoft Windows 10 and Windows Server 2016, including versions 1903, 1909, 2004, and 20H2. The vulnerability is distinct from similar issues tracked as CVE-2020-17073 and CVE-2020-17074 (NVD).

The vulnerability has received a CVSS v3.1 base score of 7.8 (High), with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a base score of 7.2 (High) with the vector (AV:L/AC:L/Au:N/C:C/I:C/A:C). These scores indicate that the vulnerability requires local access but has high potential impact across confidentiality, integrity, and availability (NVD).

The vulnerability could allow an attacker to gain elevated privileges within the Windows Update Orchestrator Service. A successful exploit would give an attacker high levels of access to system resources, potentially compromising the confidentiality, integrity, and availability of the affected system (NVD).

The vulnerability requires local access and low attack complexity to exploit. An attacker would need low privileges but no user interaction to successfully exploit this vulnerability (NVD).

Microsoft has released security updates to address this vulnerability. The fix is available through the Microsoft security advisory and should be applied to affected systems (Microsoft Advisory).