Skip to content
Heist/ feed
High

Win32k Elevation of Privilege Vulnerability

Type: advisorySource: Official CVE ListKnown exploited1 source record

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.

Announced Group revision 1
Original source ↗

CVE-2020-1054

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2020-1054

Windows 10 Version 1507

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows 10 Version 1607

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows 10 Version 1709

Source reference: /containers/cna/affected/2/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows 10 Version 1709 for 32-bit Systems

Source reference: /containers/cna/affected/3/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows 10 Version 1803

Source reference: /containers/cna/affected/4/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows 10 Version 1809

Source reference: /containers/cna/affected/5/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows 10 Version 1809

Source reference: /containers/cna/affected/6/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows 10 Version 1903 for 32-bit Systems

Source reference: /containers/cna/affected/7/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows 10 Version 1903 for ARM64-based Systems

Source reference: /containers/cna/affected/8/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows 10 Version 1903 for x64-based Systems

Source reference: /containers/cna/affected/9/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows 10 Version 1909

Source reference: /containers/cna/affected/10/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows 7

Source reference: /containers/cna/affected/11/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows 7 Service Pack 1

Source reference: /containers/cna/affected/12/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows 8.1

Source reference: /containers/cna/affected/13/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows Server 2008 R2 Service Pack 1

Source reference: /containers/cna/affected/14/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows Server 2008 R2 Service Pack 1 (Server Core installation)

Source reference: /containers/cna/affected/15/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows Server 2008 Service Pack 2

Source reference: /containers/cna/affected/16/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows Server 2008 Service Pack 2 (Server Core installation)

Source reference: /containers/cna/affected/17/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows Server 2012

Source reference: /containers/cna/affected/18/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows Server 2012 (Server Core installation)

Source reference: /containers/cna/affected/19/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows Server 2012 R2

Source reference: /containers/cna/affected/20/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows Server 2012 R2 (Server Core installation)

Source reference: /containers/cna/affected/21/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows Server 2016

Source reference: /containers/cna/affected/22/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows Server 2016 (Server Core installation)

Source reference: /containers/cna/affected/23/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows Server 2019

Source reference: /containers/cna/affected/24/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows Server 2019 (Server Core installation)

Source reference: /containers/cna/affected/25/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows Server, version 1803 (Server Core Installation)

Source reference: /containers/cna/affected/26/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows Server, version 1903 (Server Core installation)

Source reference: /containers/cna/affected/27/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Windows Server, version 1909 (Server Core installation)

Source reference: /containers/cna/affected/28/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1507",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.10240.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1607",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.14393.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1709",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "ARM64-based Systems",
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1709 for 32-bit Systems",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "32-bit Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1803",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.17763.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1809",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "ARM64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1903 for 32-bit Systems",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1903 for ARM64-based Systems",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1903 for x64-based Systems",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 10 Version 1909",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 7",
    "versions": [
      {
        "status": "affected",
        "version": "6.1.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "32-bit Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 7 Service Pack 1",
    "versions": [
      {
        "status": "affected",
        "version": "6.1.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows 8.1",
    "versions": [
      {
        "status": "affected",
        "version": "6.3.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 R2 Service Pack 1",
    "versions": [
      {
        "status": "affected",
        "version": "6.1.7601.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 R2 Service Pack 1 (Server Core installation)",
    "versions": [
      {
        "status": "affected",
        "version": "6.1.7601.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 Service Pack 2",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.6003.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2008 Service Pack 2 (Server Core installation)",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.6003.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012",
    "versions": [
      {
        "status": "affected",
        "version": "6.2.9200.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 (Server Core installation)",
    "versions": [
      {
        "status": "affected",
        "version": "6.2.9200.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2",
    "versions": [
      {
        "status": "affected",
        "version": "6.3.9600.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2012 R2 (Server Core installation)",
    "versions": [
      {
        "status": "affected",
        "version": "6.3.9600.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.14393.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2016 (Server Core installation)",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.14393.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.17763.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server 2019 (Server Core installation)",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.17763.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server, version 1803  (Server Core Installation)",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server, version 1903 (Server Core installation)",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Windows Server, version 1909 (Server Core installation)",
    "versions": [
      {
        "status": "affected",
        "version": "10.0.0",
        "lessThan": "publication",
        "versionType": "custom"
      }
    ],
    "platforms": [
      "x64-based Systems"
    ]
  }
]
Related CVEs
CVE-2020-1054

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Linked CVE context

These ratings describe the referenced vulnerabilities and products. They are not a severity rating for every application using this dependency.

CVE-2020-1054 · Unrated

Win32k · Known exploited (CISA KEV)

Event
#12043 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement