CVE-2020-1084
MediumCVSS 5.5Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
Denial of Service vulnerability in Connected User Experiences and Telemetry Service due to improper validation of certain function values. An attacker must log on to the system and run a specially crafted application to exploit it, potentially denying dependent security feature functionality.
Risk Assessment
Exploitation may disable security features, increasing the risk of other attacks.
Recommendation
Install the security update that corrects how the Connected User Experiences and Telemetry Service validates certain function values.
Other vulnerabilities in Connected User Experiences and Telemetry Service
Original NVD description (English source)
A Denial Of Service vulnerability exists when Connected User Experiences and Telemetry Service fails to validate certain function values. An attacker who successfully exploited this vulnerability could deny dependent security feature functionality. To exploit this vulnerability, an attacker would have to log on to an affected system and run a specially crafted application. The security update addresses the vulnerability by correcting how the Connected User Experiences and Telemetry Service validates certain function values.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS