CVE-2020-1027highunder attackCWE-787

CVE-2020-1027: high-severity vulnerability in Microsoft Windows

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

71Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 7.8epss 4.7%
from disclosure to weapon
Published on NVDApr 15
CISA KEV+768d
Action required by CISAfederal deadline: 2022-06-13

Apply updates per vendor instructions.

In short

A flaw in how Windows Kernel manages memory objects allows an attacker with limited access to gain elevated privileges and control the system. This is a serious vulnerability because it can let unauthorized users take full control of a computer.

Technical detail

An out-of-bounds write vulnerability in Windows Kernel's object handling enables local privilege escalation. An attacker with local user-level access can exploit improper memory management to overwrite kernel structures and achieve SYSTEM privileges. Exploitation requires local code execution capability but no special user rights beyond standard account access.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.