nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-0624 CVE-2020-0624
HIGHRansomware
Win32k Elevation of Privilege
Record summary
CVE-2020-0624 has a selected CVSS score of 7.8 (high); EIP currently links 1 repository PoC. VulnCheck reports CVE-2020-0624 use in known ransomware campaigns.
Description
An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0642.
Description source: CVE List
Exploitation context
Known exploitation
- VulnCheck KEV
- Listed · Jan 22, 2020 · VulnCheck
- Reported exploitation
- Observed · VulnCheck
- Ransomware use
- Observed · VulnCheck
Available material
- Repository PoCs
- 1
Affected products and versions
9| Product | Source | Version range | Status |
|---|---|---|---|
WindowsBrowse Microsoft / Windows | VulnCheck | Version data not supplied | |
Windows 10 Version 1903 for 32-bit SystemsBrowse Microsoft / Windows 10 Version 1903 for 32-bit Systems | CVE List | Version range not supplied | affected |
Windows 10 Version 1903 for ARM64-based SystemsBrowse Microsoft / Windows 10 Version 1903 for ARM64-based Systems | CVE List | Version range not supplied | affected |
Windows 10 Version 1903 for x64-based SystemsBrowse Microsoft / Windows 10 Version 1903 for x64-based Systems | CVE List | Version range not supplied | affected |
Windows 10 Version 1909 for 32-bit SystemsBrowse Microsoft / Windows 10 Version 1909 for 32-bit Systems | CVE List | Version range not supplied | affected |
Windows 10 Version 1909 for ARM64-based SystemsBrowse Microsoft / Windows 10 Version 1909 for ARM64-based Systems | CVE List | Version range not supplied | affected |
Windows 10 Version 1909 for x64-based SystemsBrowse Microsoft / Windows 10 Version 1909 for x64-based Systems | CVE List | Version range not supplied | affected |
Windows Server, version 1903 (Server Core installation)Browse Microsoft / Windows Server, version 1903 (Server Core installation) | CVE List | Version range not supplied | affected |
Windows Server, version 1909 (Server Core installation)Browse Microsoft / Windows Server, version 1909 (Server Core installation) | CVE List | Version range not supplied | affected |
Proofs of concept
1Repository PoCs
GitHubjames0x40/CVE-2020-0624Repository PoCby james0x40Stars: 70Not analyzed8 files
References
2portal.msrc.microsoft.com
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0624