CVE-2020-0792

8.8 highEPSS 1.3%

High (8.8) in microsoft. EPSS 1.3% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0715, CVE-2020-0745.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2020-02-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:windows_10
microsoft:windows_server_2016

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0792
https://www.zerodayinitiative.com/advisories/ZDI-20-259/
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0792
https://www.zerodayinitiative.com/advisories/ZDI-20-259/

Check your stack JSON