⚠ Actively exploited
Added to CISA KEV on 2021-11-03. Federal agencies required to patch by 2022-05-03. Required action: Apply updates per vendor instructions..

CVE-2020-0986 — Out-of-bounds Write in Microsoft Windows

CWE-787 — Out-of-bounds WriteCWE-269 — Improper Privilege Management11 documents8 sources
Severity
7.8HIGHNVD
EPSS
14.4%
top 5.57%
CISA KEV
KEV
Added 2021-11-03
Due 2022-05-03
Exploit
Exploited in wild
Active exploitation observed
Affected products
12
Microsoft WindowsMicrosoft Windows 10 Version 1903 FOR 32-bit SystemsMicrosoft Windows 10 Version 1903 FOR Arm64-based Systems+9 more
Timeline
PublishedJun 9
KEV addedNov 3
KEV dueMay 3
Latest updateMay 24
CISA Required Action: Apply updates per vendor instructions.

Description

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages12 packages

▶CVEListV5microsoft/windows16 versions+15
▶CVEListV5microsoft/windows_server9 versions+8

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

6
GHSA
GHSA-5wgx-4x92-f6pf: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Pr↗2022-05-24
▶
Project0
Déjà vu-lnerability - Project Zero↗2021-02-01
▶
CVEList
CVE-2020-0986: An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Pr↗2020-06-09
▶
VulnCheck
Microsoft Windows Kernel Privilege Escalation Vulnerability↗2020
▶
Project0
Project Zero RCA: CVE-2020-0986: Windows splwow64 Untrusted Pointer Dereference↗
▶

📋Vendor Advisories

2
CISA
Microsoft Windows Kernel Privilege Escalation Vulnerability↗2021-11-03
▶
Microsoft
Windows Kernel Elevation of Privilege Vulnerability↗2020-06-09
▶

🕵️Threat Intelligence

1
Securelist
Operation PowerFall: CVE-2020-0986 and variants↗2020-09-02
▶
CVE-2020-0986 — Out-of-bounds Write in Microsoft | cvebase