ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

Vulnerability managementShadowTrackr CVSS score
← Back to results

CVE-2020-16902

<p>An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.</p> <p>A locally authenticated attacker could run arbitrary code with elevated system privileges. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>The security update addresses the vulnerability by correcting the input sanitization error to preclude unintended elevation.</p>
An official patch is available. Apply the patch as soon as possible.
7.8
CVSS
6.4
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
CVSS v4.0 Metrics
Exploitability
Attack VectorLocal
ComplexityLow
RequirementsPresent
PrivilegesLow
User InteractionNone
Threat
Exploit MaturityPoC
Vulnerable System
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Subsequent System
ConfidentialityNone
IntegrityNone
AvailabilityNone
Supplemental
SafetyNegligible
AutomatableYes
RecoveryAutomatic
Value DensityConcentrated
UrgencyMedium
Patch StatusOfficial Patch

Change Log
DateSourceChangesScore
2026-07-21nvdpatch: Unavailable→Official Patch6.4 → 6.4
2026-07-21cve.orginitial, patch: Unavailable6.4
References: CVE.org · NVD · PoC

Affected Software
VendorProductVersion
MicrosoftWindows 10 Version 1507≥ 10.0.0, < publication
MicrosoftWindows 10 Version 1607≥ 10.0.0, < publication
MicrosoftWindows 10 Version 1709≥ 10.0.0, < publication
MicrosoftWindows 10 Version 1709 for 32-bit Systems≥ 10.0.0, < publication
MicrosoftWindows 10 Version 1803≥ 10.0.0, < publication
MicrosoftWindows 10 Version 1809≥ 10.0.0, < publication
MicrosoftWindows 10 Version 1903 for 32-bit Systems≥ 10.0.0, < publication
MicrosoftWindows 10 Version 1903 for ARM64-based Systems≥ 10.0.0, < publication
MicrosoftWindows 10 Version 1903 for x64-based Systems≥ 10.0.0, < publication
MicrosoftWindows 10 Version 1909≥ 10.0.0, < publication
MicrosoftWindows 10 Version 2004≥ 10.0.0, < publication
MicrosoftWindows 7≥ 6.1.0, < publication
MicrosoftWindows 7 Service Pack 1≥ 6.1.0, < publication
MicrosoftWindows 8.1≥ 6.3.0, < publication
MicrosoftWindows Server 2008 Service Pack 2≥ 6.0.0, < publication
MicrosoftWindows Server 2008 R2 Service Pack 1≥ 6.1.0, < publication
MicrosoftWindows Server 2008 R2 Service Pack 1 (Server Core installation)≥ 6.0.0, < publication
MicrosoftWindows Server 2008 Service Pack 2≥ 6.0.0, < publication
MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation)≥ 6.0.0, < publication
MicrosoftWindows Server 2012≥ 6.2.0, < publication
MicrosoftWindows Server 2012 (Server Core installation)≥ 6.2.0, < publication
MicrosoftWindows Server 2012 R2≥ 6.3.0, < publication
MicrosoftWindows Server 2012 R2 (Server Core installation)≥ 6.3.0, < publication
MicrosoftWindows Server 2016≥ 10.0.0, < publication
MicrosoftWindows Server 2016 (Server Core installation)≥ 10.0.0, < publication
MicrosoftWindows Server 2019≥ 10.0.0, < publication
MicrosoftWindows Server 2019 (Server Core installation)≥ 10.0.0, < publication
MicrosoftWindows Server version 2004≥ 10.0.0, < publication
MicrosoftWindows Server, version 1903 (Server Core installation)≥ 10.0.0, < publication
MicrosoftWindows Server, version 1909 (Server Core installation)≥ 10.0.0, < publication
microsoftwindows_10All versions
microsoftwindows_101607
microsoftwindows_101709
microsoftwindows_101803
microsoftwindows_101809
microsoftwindows_101903
microsoftwindows_101909
microsoftwindows_102004
microsoftwindows_7All versions
microsoftwindows_8.1All versions
microsoftwindows_rt_8.1All versions
microsoftwindows_server_2008All versions
microsoftwindows_server_2008r2
microsoftwindows_server_2012All versions
microsoftwindows_server_2012r2
microsoftwindows_server_2016All versions
microsoftwindows_server_20161903
microsoftwindows_server_20161909
microsoftwindows_server_20162004
microsoftwindows_server_2019All versions
Published: 2020-10-16