CISA Known Exploited Vulnerability

CVE-2020-0638 Ransomware

Microsoft · Update Notification Manager

Microsoft Update Notification Manager Privilege Escalation Vulnerability

Date added 2022-05-23

BOD 22-01 due date 2022-06-13

CWE —

Ransomware Known

CISA description

Microsoft Update Notification Manager contains an unspecified vulnerability that allows for privilege escalation.

Apply updates per vendor instructions.

Vulnerability data triggers these controls during assessment and continuous monitoring.