CVE-2020-0986

HIGH KEV RANSOMWARE

Microsoft Windows 10 1507 - Out-of-Bounds Write

Title source: rule

Description

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.

References (3)

[Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/160698/Microsoft-Windows-splWOW64-Privilege-Escalation.html

[Patch, Vendor Advisory] https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0986

[US Government Resource] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0986

Scores

CVSS v3 7.8

EPSS 0.1437

EPSS Percentile 94.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CISA KEV 2021-11-03

VulnCheck KEV 2020-06-09

InTheWild.io 2020-06-09

ENISA EUVD EUVD-2020-2452

Ransomware Use Confirmed

CWE

CWE-787

Status published

Products (18)

microsoft/windows_10_1507 (2 CPE variants)

microsoft/windows_10_1607 (2 CPE variants)

microsoft/windows_10_1709 (3 CPE variants)

microsoft/windows_10_1803 (3 CPE variants)

microsoft/windows_10_1809 (3 CPE variants)

microsoft/windows_10_1903 (3 CPE variants)

microsoft/windows_10_1909 (3 CPE variants)

microsoft/windows_10_2004 (3 CPE variants)

microsoft/windows_8.1

microsoft/windows_rt_8.1

... and 8 more

Published Jun 09, 2020

KEV Added Nov 03, 2021

Tracked Since Feb 18, 2026