Vendor / Project: Microsoft Product: Windows Description: An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. Required Action: Apply updates per vendor instructions. Due Date: 2022-06-13 Ransomware Campaign Use: Unknown CWEs: CWE-787 Notes: https://nvd.nist.gov/vuln/detail/CVE-2020-1027
CVE-2020-1027 — Microsoft Windows Kernel Privilege Escalation Vulnerability
Kurzinfo
Metadaten
- Original (extern): Link oeffnen
- Veroeffentlicht: 2022-05-23 00:00 UTC
- Importiert: 2026-10-20 22:46 UTC
- CVSS: 7.8
- Quelle-ID:
cisa_kev - uid_hash:
49a0cc5ae67ef86822a3e7b3eb723365abdd5ada88b3aff2ef8cd6378145b508
Inhalt
Verknuepfte CVEs
| CVE-ID | Severity (Quelle) | CVSS (Quelle) | Severity (CVE.org) | CVSS (CVE.org) | EPSS | EPSS-Pctl | Veroeffentlicht (CVE.org) |
|---|---|---|---|---|---|---|---|
HIGH |
7.8 |
HIGH |
7.8 |
2020-04-15 |
Quellen-Details
| Bezeichnung | Name | Kategorie | Tags | Zielgruppe | Sprache | Feed-URL |
|---|---|---|---|---|---|---|
| CISA – Known Exploited Vulnerabilities (KEV) | threat_intel | cisa, kev | - | de | https://raw.githubusercontent.com/cisagov/kev-data/develop/known_exploited_vulnerabilities.json |