CVE:CVE-2020-16958
CNNVD:CNNVD-202012-735
Microsoft Windows是美国微软（Microsoft）公司的一种桌面操作系统。
Microsoft Windows 备份引擎特权提升漏洞，该漏洞源于应用程序没有在Windows Backup Engine中正确施加安全限制，从而导致绕过安全限制和特权升级。以下产品及版本受到影响：windows 10 20H2,windows 10 1803 ,windows 10 1809 ,windows 10 1909 ,windows 10 1903 ,windows 10 2004 ,windows 10 ,windows 10 1607 ,windows 7 ,windows_server 2019 ,windows_server 2019 1909 ,windows_server 2019 1903 ,windows_server 2019 2004 ,windows_server 2016 ,windows_server 2008 R2 ,windows_server 2019 20H2。
solution:Upgrade microsoft windows_10 to a higher version than -,20h2,1607,1803,1809,1903,1909,2004,and avoid the version 20h2,1607,1803,1809,1903,1909,2004; Upgrade microsoft windows_7 to a higher version than -:sp1,and avoid the version -:sp1; Upgrade microsoft windows_server_2008 to a higher version than r2:sp1,and avoid the version r2:sp1; Upgrade microsoft windows_server_2016 to a higher version than -,20h2,1903,1909,2004,and avoid the version 20h2,1903,1909,2004; Upgrade microsoft windows_server_2019 to a higher version than -