SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2020-17103

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

HIGH 7.0EPSS 23.8%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 23.8%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.

Description

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

CVSS 3.1
7.0 HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
23.84% probability · 98th percentile
Public exploits
None in Exploit-DB
CISA KEV
Not listed
Weakness
CWE-269
Affected
microsoft/windows 10 · microsoft/windows server 2016 · microsoft/windows server 2019
Source
secure@microsoft.com
EPSS trend
0%13%25%10 October 2026: 23.36%12 October 2026: 22.15%25 October 2026: 23.84%26 October 2026: 23.84%10 October 202626 October 2026

EPSS moved from 23.4% on 10 October 2026 to 23.8% on 26 October 2026. The dashed line is the ten per cent mark our analysts treat as “patch before the next change window”.

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.