## CVE-2020-1313

#### 描述

当Windows Update Orchestrator服务不正确处理文件操作时，可提升权限

#### 影响版本

| Product             | Version       | Update | Edition | Tested             |
| :------------------ | :------------ | ------ | ------- | ------------------ |
| Windows 10          | X86/x64/ARM64 | 1903   |         |                    |
| Windows 10          | X86/x64/ARM64 | 1909   |         | &#10004; |
| Windows 10          | X86/x64/ARM64 | 2004   |         |                    |
| Windows Server      |               | 1903   |         |                    |
| Windows Server      |               | 1909   |         |                    |
| Windows Server      |               | 2004   |         |                    |

#### 修复补丁

```
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1313
```

#### 利用方式

编译环境

- VS2019（V141）X64 Release

测试机器Windows 10 1909 x64如图所示

![CVE-2020-1313_windos_10_1909_x64.gif](https://raw.github.com/Ascotbe/Image/master/Kernelhub/CVE-2020-1313_windos_10_1909_x64.gif)

#### 分析文章
- https://cloud.tencent.com/developer/article/1683124

#### 脚本来源

- [irsl](https://github.com/irsl/CVE-2020-1313)

