CVE-2020-17092

CVE-2020-17092 is an Elevation of Privilege vulnerability affecting the Windows Network Connections Service across various Windows 10, 8.1, and Server versions. With a CVSS score of 7.8 (High), it allows a local, low-privileged attacker to gain high-level privileges on the system, leading to full compromise of confidentiality, integrity, and availability. While the EPSS score is low and it's not listed in CISA KEV, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), and community discussion and media coverage are minimal. Microsoft addressed this vulnerability in their December 2020 Patch Tuesday.