{"id":"CVE-2020-1027","kind":"vulnerability","aliases":["CVE-2020-1027"],"related":[],"title":"Microsoft Windows: Microsoft Windows Kernel Privilege Escalation Vulnerability","description":"An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions.\n\nCISA required action: Apply updates per vendor instructions.","summary":"A flaw in how the Windows kernel handles objects in memory lets a local user raise their privileges. An attacker who already has code running on the machine can gain elevated (SYSTEM-level) control.","severity":"high","cvss":7.8,"epss":0.04723,"exploited":true,"exploited_at":"2022-05-23T00:00:00+00:00","products":[{"name":"Microsoft Windows","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","infrastructure","self-hosted","windows"],"not_affected_if":["patched-windows"],"how_to_check":null,"fix":"Apply the Microsoft Windows security update for CVE-2020-1027 per vendor instructions (CISA KEV required action).","status":"open","published_at":"2020-04-15T15:15:21+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:16:06+00:00","updated_at":"2026-10-23T21:57:35+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-23T21:16:06Z","model":"claude-haiku-5-5","output":{"fix":"Apply the Microsoft Windows security update for CVE-2020-1027 per vendor instructions (CISA KEV required action).","reach":"local","impact":"high","summary":"A flaw in how the Windows kernel handles objects in memory lets a local user raise their privileges. An attacker who already has code running on the machine can gain elevated (SYSTEM-level) control.","category":"infrastructure","who_cares":["windows","self-hosted"],"confidence":0.7,"needs_auth":"yes","worst_case":"local attacker gains elevated kernel-level privileges on the Windows machine","analyst_note":"Sources do not name affected or fixed Windows builds; check Microsoft's security update guide entry for CVE-2020-1027 for the patched builds and a detection method.","how_to_check":"unknown","needs_analyst":true,"not_affected_if":["patched-windows"],"user_interaction":"no","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000454,"input_tokens":2846,"output_tokens":338,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-1027':11A,14A '-2020':10A,13A 'action':90C 'alreadi':44B 'appli':91C 'attack':42B,76C 'cisa':88C 'code':46B,84C 'control':57B 'could':82C 'cve':9A,12A 'elev':53B,59C,86C 'escal':7A 'execut':83C 'exist':63C 'exploit':17B,79C 'flaw':24B 'gain':52B 'handl':30B,71C 'host':21B 'infrastructur':18B 'instruct':95C 'kernel':5A,29B,70C 'let':34B 'level':56B 'local':36B 'machin':50B 'memori':33B,74C 'microsoft':1A,3A,15A 'object':31B,72C 'per':93C 'permiss':87C 'privileg':6A,40B,61C 'rais':38B 'requir':89C 'run':47B 'self':20B 'self-host':19B 'success':78C 'system':55B 'system-level':54B 'updat':92C 'user':37B 'vendor':94C 'vulner':8A,62C,81C 'way':66C 'window':2A,4A,22B,28B,69C 'windows':16A","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2020-04-15T15:15:21+00:00","kev":{"dateAdded":"2022-05-23","dueDate":"2022-06-13","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2020-1027","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-1027","severity":null,"published_at":"2022-05-23T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T11:39:16+00:00","note":null},{"source":"epss","external_id":"CVE-2020-1027","url":"https://api.first.org/data/v1/epss?cve=CVE-2020-1027","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2020-1027","url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1027","severity":null,"published_at":"2020-04-15T15:15:21+00:00","modified_at":"2026-06-17T03:00:15+00:00","first_seen_at":"2026-10-23T21:57:35+00:00","fetched_at":"2026-10-23T21:57:35+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}