ZeroDay Findings
Sign inSign up

Findings

CVE-2020-0986

Microsoft Windows Kernel Privilege Escalation Vulnerability

Published Jun 9, 2020 · updated Jun 16, 2026 · microsoft windows 10 1507

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.

Timeline

Detection, updates, and resolution for this record.

  1. Jun 9, 2020 · Catalog

    Detected

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.

  2. Nov 3, 2021 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. May 3, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.

Required action

Apply updates per vendor instructions.

CISA due date May 3, 2022

Affected

  • cpe microsoft/windows 10 1507version unspecified
  • cpe microsoft/windows 10 1607version unspecified
  • cpe microsoft/windows 10 1709version unspecified
  • cpe microsoft/windows 10 1803version unspecified
  • vendor Microsoft Windowsversion unspecified

Sources

  • CISA KEVCVE-2020-0986

    Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode.

    cisa.gov
  • CVE.orgCVE-2020-0986

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2020-0986

    30-day exploitation probability 16.4%

    first.org
  • NIST NVDCVE-2020-0986

    An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-

    nvd.nist.gov
  • Packet Storm Securityhttp://packetstormsecurity.com/files/160698/Microsoft-Windows-splWOW64-Privilege-Escalation.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References