Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2020-1010: Microsoft Windows: Attackers can delete files anywhere.

CVE-2020-1010 · published 6 years ago

Summary

A Windows security issue allows attackers to delete files from any location on the system after logging in. This can lead to data loss or system compromise. To fix this, install the latest Windows update.

What to do

Update microsoft windows 10 version 1507 to version publication or later.
Update microsoft windows 10 version 1607 to version publication or later.
Update microsoft windows 10 version 1709 to version publication or later.
Update microsoft windows 10 version 1709 for 32-bit systems to version publication or later.
Update microsoft windows 10 version 1803 to version publication or later.
Update microsoft windows 10 version 1809 to version publication or later.
Update microsoft windows 10 version 1903 for 32-bit systems to version publication or later.
Update microsoft windows 10 version 1903 for arm64-based systems to version publication or later.
Update microsoft windows 10 version 1903 for x64-based systems to version publication or later.
Update microsoft windows 10 version 1909 to version publication or later.
Update microsoft windows 7 to version publication or later.
Update microsoft windows 7 service pack 1 to version publication or later.
Update microsoft windows 8.1 to version publication or later.
Update microsoft windows server 2008 r2 service pack 1 to version publication or later.
Update microsoft windows server 2008 r2 service pack 1 (server core installation) to version publication or later.
Update microsoft windows server 2012 to version publication or later.
Update microsoft windows server 2012 (server core installation) to version publication or later.
Update microsoft windows server 2012 r2 to version publication or later.
Update microsoft windows server 2012 r2 (server core installation) to version publication or later.
Update microsoft windows server 2016 to version publication or later.
Update microsoft windows server 2016 (server core installation) to version publication or later.
Update microsoft windows server 2019 to version publication or later.
Update microsoft windows server 2019 (server core installation) to version publication or later.
Update microsoft windows server, version 1803 (server core installation) to version publication or later.
Update microsoft windows server, version 1903 (server core installation) to version publication or later.
Update microsoft windows server, version 1909 (server core installation) to version publication or later.

Affected software

Vendor	Product	Affected versions
microsoft	windows 10 version 1507	< publication
microsoft	windows 10 version 1607	< publication
microsoft	windows 10 version 1709	< publication
microsoft	windows 10 version 1709 for 32-bit systems	< publication
microsoft	windows 10 version 1803	< publication
microsoft	windows 10 version 1809	< publication
microsoft	windows 10 version 1903 for 32-bit systems	< publication
microsoft	windows 10 version 1903 for arm64-based systems	< publication
microsoft	windows 10 version 1903 for x64-based systems	< publication
microsoft	windows 10 version 1909	< publication
microsoft	windows 7	< publication
microsoft	windows 7 service pack 1	< publication
microsoft	windows 8.1	< publication
microsoft	windows server 2008 r2 service pack 1	< publication
microsoft	windows server 2008 r2 service pack 1 (server core installation)	< publication
microsoft	windows server 2012	< publication
microsoft	windows server 2012 (server core installation)	< publication
microsoft	windows server 2012 r2	< publication
microsoft	windows server 2012 r2 (server core installation)	< publication
microsoft	windows server 2016	< publication
microsoft	windows server 2016 (server core installation)	< publication
microsoft	windows server 2019	< publication
microsoft	windows server 2019 (server core installation)	< publication
microsoft	windows server, version 1803 (server core installation)	< publication
microsoft	windows server, version 1903 (server core installation)	< publication
microsoft	windows server, version 1909 (server core installation)	< publication
microsoft	windows_10	1607 1709 1803 1809 1903 1909 `cpe:2.3:o:microsoft:windows_10:-:::::::*`
microsoft	windows_7	All versions `cpe:2.3:o:microsoft:windows_7:-:sp1::::::`
microsoft	windows_8.1	All versions `cpe:2.3:o:microsoft:windows_8.1:-:::::::*`
microsoft	windows_rt_8.1	All versions `cpe:2.3:o:microsoft:windows_rt_8.1:-:::::::*`
microsoft	windows_server_2008	r2 `cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:::::itanium:*`
microsoft	windows_server_2012	r2 `cpe:2.3:o:microsoft:windows_server_2012:-:::::::*`
microsoft	windows_server_2016	1803 1903 1909 `cpe:2.3:o:microsoft:windows_server_2016:-:::::::*`
microsoft	windows_server_2019	All versions `cpe:2.3:o:microsoft:windows_server_2019:-:::::::*`

Original advisory text

Microsoft Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows Block Level Backup Engine Service (wbengine) that allows file deletion in arbitrary locations.
To exploit the vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.
The update addresses the vulnerability by correcting how the Windows Block Level Backup Engine Service handles file operations.

References

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.8 High

Exploitation

<1% chance of attack within 30 days

Timeline

Published21 May 2020

Updated4 Nov 2026

First seen19 Aug 2026

Sources

CVE-2020-1010 · NVD

CVE-2020-1010 · MITRE

Track software like this

Free during beta