An elevation of privilege vulnerability exists in the way the Update Notification Manager handles files.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Update Notification Manager Elevation of Privilege Vulnerability'.
Use CWE-59, Microsoft vendor hub and Windows 10 1709 product page to widen CVE-2020-0638 into its surrounding weakness, vendor, and product context.
Compare it with CVE-2020-1464, CVE-2020-1380 and CVE-2020-0986 for nearby disclosures in the same product family. Additional editorial context is available in Weekly Security Roundup: Navigating the April 2026 Threat Landscape and Critical Framework Exploits.