CVE-2020-1027 — Microsoft Windows Kernel Privilege Escalation Vulnerability
CVE-2020-1027: Microsoft Windows Kernel Privilege Escalation Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Microsoft |
| Product | Windows |
| Date added | 2022-05-23 |
| Due date | 2022-06-13 |
| Ransomware campaign use | Unknown |
Description
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.
Required action (CISA)
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2020-1027
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-1027
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog