CVSS 3.1
7.8 highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2020-0668
High (7.8) in microsoft. EPSS 26% chance of exploitation in the next 30 days.
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.
Severity
- EPSS
- 26% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
- CWE
- CWE-732
- Published
- Modified
- Record from
- the NVD, synced
Affected
- microsoft:windows_10
- microsoft:windows_7
- microsoft:windows_8.1
- microsoft:windows_rt_8.1
- microsoft:windows_server_2008
- microsoft:windows_server_2012
- microsoft:windows_server_2016
- microsoft:windows_server_2019
References
- http://packetstormsecurity.com/files/156576/Microsoft-Windows-Kernel-Privilege-Escalation.html
- http://packetstormsecurity.com/files/157615/Service-Tracing-Privilege-Escalation.html
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0668
- https://www.zerodayinitiative.com/advisories/ZDI-20-257/
- http://packetstormsecurity.com/files/156576/Microsoft-Windows-Kernel-Privilege-Escalation.html