Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-90799)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows/Windows Server, which stems from a failure of the Connected User Experience and Telemetry Service to properly handle file operations, and can be exploited by attackers running specially crafted applications to elevate privileges.