CVE-2020-1027: high-severity vulnerability in Microsoft Windows
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply updates per vendor instructions.
A flaw in how Windows Kernel manages memory objects allows an attacker with limited access to gain elevated privileges and control the system. This is a serious vulnerability because it can let unauthorized users take full control of a computer.
An out-of-bounds write vulnerability in Windows Kernel's object handling enables local privilege escalation. An attacker with local user-level access can exploit improper memory management to overwrite kernel structures and achieve SYSTEM privileges. Exploitation requires local code execution capability but no special user rights beyond standard account access.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.