ZeroDay Findings
Sign inSign up

Findings

CVE-2020-1027

Microsoft Windows Kernel Privilege Escalation Vulnerability

Published Apr 15, 2020 · updated Jun 16, 2026 · microsoft windows 10 1507

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.

Timeline

Detection, updates, and resolution for this record.

  1. Apr 15, 2020 · Catalog

    Detected

    An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.

  2. May 23, 2022 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. Jun 13, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.

Required action

Apply updates per vendor instructions.

CISA due date Jun 13, 2022

Affected

  • cpe microsoft/windows 10 1507version unspecified
  • cpe microsoft/windows 10 1607version unspecified
  • cpe microsoft/windows 10 1709version unspecified
  • cpe microsoft/windows 10 1803version unspecified
  • vendor Microsoft Windowsversion unspecified

Sources

  • CISA KEVCVE-2020-1027

    An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.

    cisa.gov
  • CVE.orgCVE-2020-1027

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2020-1027

    30-day exploitation probability 4.5%

    first.org
  • NIST NVDCVE-2020-1027

    An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.

    nvd.nist.gov
  • Packet Storm Securityrity.com/files/168068/Windows-sxs-CNodeFactory-XMLParser_Element_doc_assembly_assemblyIdentity-Heap-Buffer-Overflow.html

    Packet Storm link already published on the finding.

    packetstormsecurity.com

References

CVE-2020-1027 · ZeroDay Findings