CVE-2020-17103: 
vulnerability analysis and mitigation

CVE-2020-17103 is a Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability that was disclosed on December 9, 2020. The vulnerability affects various versions of Microsoft Windows 10 and Windows Server 2016 operating systems. This vulnerability is distinct from related issues CVE-2020-17134 and CVE-2020-17136 (NVD).

The vulnerability has received a CVSS v3.1 base score of 7.8 (HIGH) from NIST with a vector string of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, while Microsoft assessed it with a score of 7.0 (HIGH) and vector string CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a base score of 7.2 (HIGH) with vector (AV:L/AC:L/Au:N/C:C/I:C/A:C) (NVD).

The vulnerability could allow an attacker to gain elevated privileges on affected systems. Based on the CVSS scores, successful exploitation could result in high impacts to confidentiality, integrity, and availability of the affected systems (NVD).

The vulnerability requires local access (AV:L) and low privileges (PR:L) to exploit. No user interaction (UI:N) is required for exploitation. Microsoft's assessment indicates higher attack complexity (AC:H) compared to NIST's evaluation (AC:L) (NVD).

Microsoft has released security patches to address this vulnerability. Users should apply the appropriate security updates through the Microsoft Security Response Center (MSRC).