CVE-2020-1087

Katalog CVE

CVSS 7.8 · High EPSS 0,83%

Kerentanan pada microsoft windows 10, microsoft windows server 2016 +1 lainnya. Skor CVSS 3.1 7.8 (High) menurut microsoft.com.

Deskripsi (NVD)

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the Windows Kernel properly handles objects in memory.

Rincian

Terbit di NVD

21 Mei 2020

Terakhir diubah

19 Agustus 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber microsoft.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

0,83% peluang dieksploitasi; lebih tinggi dari 56,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1087 patch · advisory vendor
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1087