CVE-2020-0638

A flaw in Windows Update Notification Manager allows an attacker who already has access to your computer to gain higher-level permissions and control more of the system. This is dangerous because it lets limited accounts become administrators.

An elevation of privilege vulnerability in the Update Notification Manager's file handling mechanism allows a locally authenticated attacker to escalate privileges. The vulnerability requires initial code execution on the target system; successful exploitation grants attacker ability to execute code with elevated SYSTEM or administrator context.