CVE-2020-16913

4 documents4 sources

Severity

7.8HIGH

EPSS

0.5%

top 32.40%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Windows 10 Version 1709 Microsoft Windows 10 Version 1709 FOR 32-bit Systems Microsoft Windows 10 Version 1803 +11 more

Timeline

PublishedOct 16

Latest updateMay 24

Description

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application th…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages14 packages

▶CVEListV5microsoft/windows_10_version_1709_for_32-bit_systems10.0.0 — publication

▶CVEListV5microsoft/windows_10_version_1903_for_32-bit_systems10.0.0 — publication

▶CVEListV5microsoft/windows_10_version_1903_for_x64-based_systems10.0.0 — publication

▶CVEListV5microsoft/windows_10_version_1903_for_arm64-based_systems10.0.0 — publication

▶CVEListV5microsoft/windows_server_2019_(server_core_installation)10.0.0 — publication

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

GHSA

GHSA-97h7-f4f7-86x2: An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k↗2022-05-24

▶

CVEList

Win32k Elevation of Privilege Vulnerability↗2020-10-16

▶

📋Vendor Advisories

Microsoft

Win32k Elevation of Privilege Vulnerability↗2020-10-13

▶