CVE-2020-1302

CVE-2020-1302 is an elevation of privilege vulnerability in Windows Installer, affecting multiple versions of Microsoft Windows and Windows Server. It stems from how Windows Installer handles specific filesystem operations, allowing an attacker with unprivileged execution to gain higher privileges. With a CVSS score of 7.8 (High), this vulnerability has a low attack complexity and requires local access, but can lead to high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it has garnered significant community discussion and media coverage, including a mention of a free micropatch.