Zero Day Initiative — CVE-2020-16939: Windows Group Policy DACL Overwrite Privilege Escalation
Zero Day Initiative — CVE-2020-16939: Windows Group Policy DACL Overwrite Privilege Escalation https://ift.tt/2HI1bnz This vulnerability abuses a SetSecurityFile operation performed during Group Policy update that is done in the context of NT AUTHORITY\SYSTEM. This operation is performed on all files within a certain folder. An attacker could create a directory junction to another folder and […]