CVE-2020-1027

CVE Database · CVE-2020-1027

CVE-2020-1027

· HIGHAnalyzed

CVSS v3.1

7.8

EPSS

4.48%

Published

Apr 15, 2020

Modified

Oct 29, 2025

CISA Known Exploited Vulnerability

Added: 2022-05-23 · Due: 2022-06-13

Apply updates per vendor instructions.

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0913, CVE-2020-1000, CVE-2020-1003.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-787CWE-787

Affected Products (32)

microsoft · windows_10_1507vulnerable

microsoft · windows_10_1607vulnerable

microsoft · windows_10_1709vulnerable

microsoft · windows_10_1803vulnerable

References (5)

http://packetstormsecurity.com/files/168068/Windows-sxs-CNodeFactory-XMLParser_Element_doc_assembly_assemblyIdentity-Heap-Buffer-Overflow.html

ExploitThird Party AdvisoryVDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1027

PatchVendor Advisory

http://packetstormsecurity.com/files/168068/Windows-sxs-CNodeFactory-XMLParser_Element_doc_assembly_assemblyIdentity-Heap-Buffer-Overflow.html

ExploitThird Party AdvisoryVDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1027

PatchVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs