7.8

CVE-2020-0986

Warnung
An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Windows 10 1507 Version - HwPlatform x64
Microsoft ≫ Windows 10 1507 Version - HwPlatform x86
Microsoft ≫ Windows 10 1607 Version - HwPlatform x64
Microsoft ≫ Windows 10 1607 Version - HwPlatform x86
Microsoft ≫ Windows 10 1709 Version - HwPlatform arm64
Microsoft ≫ Windows 10 1709 Version - HwPlatform x64
Microsoft ≫ Windows 10 1709 Version - HwPlatform x86
Microsoft ≫ Windows 10 1803 Version - HwPlatform arm64
Microsoft ≫ Windows 10 1803 Version - HwPlatform x64
Microsoft ≫ Windows 10 1803 Version - HwPlatform x86
Microsoft ≫ Windows 10 1809 Version - HwPlatform arm64
Microsoft ≫ Windows 10 1809 Version - HwPlatform x64
Microsoft ≫ Windows 10 1809 Version - HwPlatform x86
Microsoft ≫ Windows 10 1903 Version - HwPlatform arm64
Microsoft ≫ Windows 10 1903 Version - HwPlatform x64
Microsoft ≫ Windows 10 1903 Version - HwPlatform x86
Microsoft ≫ Windows 10 1909 Version - HwPlatform arm64
Microsoft ≫ Windows 10 1909 Version - HwPlatform x64
Microsoft ≫ Windows 10 1909 Version - HwPlatform x86
Microsoft ≫ Windows 10 2004 Version - HwPlatform arm64
Microsoft ≫ Windows 10 2004 Version - HwPlatform x64
Microsoft ≫ Windows 10 2004 Version - HwPlatform x86
Microsoft ≫ Windows 8.1 Version -
Microsoft ≫ Windows Rt 8.1 Version -
Microsoft ≫ Windows Server 1803 Version - HwPlatform x64
Microsoft ≫ Windows Server 1903 Version - HwPlatform x64
Microsoft ≫ Windows Server 1909 Version - HwPlatform x64
Microsoft ≫ Windows Server 2004 Version - HwPlatform x64

03.11.2021: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Windows Kernel Privilege Escalation Vulnerability

Schwachstelle

Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 15.93% 0.965
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
CISA-ADP 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

http://packetstormsecurity.com/files/160698/Microsoft-Windows-splWOW64-Privilege-Escalation.html
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0986
Patch
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0986
US Government Resource