CVE-2020-1027: Microsoft Windows Kernel Privilege Escalation Vulnerability
Vulnerability summary
CVE-2020-1027 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in Microsoft Windows. It is known to be exploited: CISA lists it, first on 23-05-2022. EPSS estimates a 4.55% chance of exploitation in the next 30 days, higher than 91.4% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 15-04-2020PublishedVulnerability first disclosed.
- 23-05-2022Added to CISA KEVMicrosoft Windows Kernel Privilege Escalation Vulnerability
- 13-06-2022CISA remediation dueApply updates per vendor instructions.
- 21-10-2025Last modifiedVulnerability information updated.
Description
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
4.55%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.55% on 19-09-2026
Known exploited
Compare KEV catalogs
CISA KEVListed- Added
- 23-05-2022
- Federal due date
- 13-06-2022
CISA required action
Apply updates per vendor instructions. nvd.nist.gov/vuln/detail/CVE-2020-1027
Public exploits
1 foundExploit Reference (packetstormsecurity.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Microsoft27 products
- windowsEOL10 Version 1803 for 32-bit Systems | 10 Version 1803 for x64-based Systems | 10 Version 1803 for ARM64-based Systems | 10 Version 1809 for 32-bit Systems | 10 Version 1809 for x64-based Systems | 10 Version 1809 for ARM64-based Systems | 10 Version 1709 for 32-bit Systems | 10 Version 1709 for x64-based Systems | 10 Version 1709 for ARM64-based Systems | 10 for 32-bit Systems | 10 for x64-based Systems | 10 Version 1607 for 32-bit Systems | 10 Version 1607 for x64-based Systems | 7 for 32-bit Systems Service Pack 1 | 7 for x64-based Systems Service Pack 1 | 8.1 for 32-bit systems | 8.1 for x64-based systems | RT 8.1
- windows_10_1507na
- windows_10_1607na
- windows_10_1709na
- windows_10_1803na
1 vendor · 27 products
References
3 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1027X Refsource MISCPatchVendor Advisory- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1027Government ResourceUS Government Resource