CVE-2020-10027
HIGHZephyrproject-RTOS >=1.14.0, >=2.1.0 - Privilege Escalation
Title source: llmDescription
An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions.
References (5)
Scores
CVSS v3
7.8
EPSS
0.0037
EPSS Percentile
58.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Details
CWE
CWE-697
Status
published
Products (2)
zephyrproject/zephyr
1.14.0
zephyrproject/zephyr
2.1.0
Published
May 11, 2020
Tracked Since
Feb 18, 2026