CVE-2020-1054: Microsoft Win32k Privilege Escalation Vulnerability

Vulnerability summary

CVE-2020-1054 is a high (CVSS 7.2) Out-of-bounds Write vulnerability in Microsoft Win32k. It is known to be exploited: CISA lists it, first on 03-11-2021. EPSS estimates a 53.88% chance of exploitation in the next 30 days, higher than 98.9% of scored vulnerabilities. 2 public exploits are recorded.

Timeline

1. 21-05-2020
   PublishedVulnerability first disclosed.
2. 03-11-2021
   Added to CISA KEVMicrosoft Win32k Privilege Escalation Vulnerability
3. 03-05-2022
   CISA remediation dueApply updates per vendor instructions.
4. 07-10-2026
   Last modifiedVulnerability information updated.

Description

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.