CVE-2020-0683VulnerabilityPublished 11/03/2021Updated 10/24/2026

CVE-2020-0683: Microsoft Windows Installer Privilege Escalation Vulnerability

Affects Microsoft WindowsSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 11/03/2021
KEV deadline: 05/03/2022
EPSS: 7.6% chance of exploitation in 30 days – higher than 94% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2020-0683 (opens in a new tab)

Description

CVE-2020-0683 is a privilege escalation vulnerability in Microsoft Windows Installer. It occurs when MSI packages process symbolic links, allowing attackers to bypass access restrictions to add or remove files. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.

Summary

Microsoft Windows Installer contains a privilege escalation vulnerability identified as CVE-2020-0683. The flaw arises during the processing of symbolic links in MSI packages, which enables attackers to circumvent access controls and modify files. This vulnerability has been observed to be exploited in real-world attacks. However, no detailed information about affected Windows versions or remediation status is provided in the input data.

Impact

Successful exploitation of this vulnerability allows attackers to escalate privileges on affected Windows systems by bypassing access restrictions related to MSI package processing. This can lead to unauthorized addition or removal of files, potentially compromising system integrity.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Microsoft advisories for updates and apply any available security updates promptly.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 09:19:55 UTC

References

Related threats