CVE-2020-17087: high-severity vulnerability in Microsoft Windows 10 Version 1507
Windows Kernel Local Elevation of Privilege Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
Apply updates per vendor instructions.
A flaw in the Windows Kernel allows an attacker with local access to gain higher privileges (escalate from a regular user to administrator). This is dangerous because it lets someone already on your computer take full control of the system.
A local privilege escalation vulnerability in the Windows Kernel (CWE-131: Incorrect Buffer Size Calculation) allows an authenticated local user to execute arbitrary code with kernel-level privileges. Exploitation requires prior local code execution capability and results in complete system compromise.
The full analysis of this CVE is available in Portuguese →
In the same product, most dangerous first.