← back
CVE-2020-1027

CVE-2020-1027

CVSS 7.8 HIGHEPSS 4.5%● KEVCWE-787
In short

A flaw in how Windows Kernel manages memory objects allows an attacker with limited access to gain elevated privileges and control the system. This is a serious vulnerability because it can let unauthorized users take full control of a computer.

Technical detail

An out-of-bounds write vulnerability in Windows Kernel's object handling enables local privilege escalation. An attacker with local user-level access can exploit improper memory management to overwrite kernel structures and achieve SYSTEM privileges. Exploitation requires local code execution capability but no special user rights beyond standard account access.

Summary generated and translated by AI from the official description.
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →