Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2020-1000
HistoryApr 15, 2020 - 3:15 p.m.

CVE-2020-1000

2020-04-1515:15:19
[email protected]
web.nvd.nist.gov
11

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

31.4%

JSON

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka ‘Windows Kernel Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2020-0913, CVE-2020-1003, CVE-2020-1027.

Affected configurations

Nvd
Node
microsoftwindows_10Match1607
OR
microsoftwindows_10Match1709
OR
microsoftwindows_10Match1803
OR
microsoftwindows_10Match1809
OR
microsoftwindows_10Match1903
OR
microsoftwindows_10Match1909
OR
microsoftwindows_7Match-sp1
OR
microsoftwindows_server_2008Match-sp2
OR
microsoftwindows_server_2008Matchr2sp1itanium
OR
microsoftwindows_server_2008Matchr2sp1x64
OR
microsoftwindows_server_2012Match-
OR
microsoftwindows_server_2016Match-
OR
microsoftwindows_server_2016Match1803
OR
microsoftwindows_server_2016Match1903
OR
microsoftwindows_server_2016Match1909
OR
microsoftwindows_server_2019Match-
VendorProductVersionCPE
microsoftwindows_101607cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
microsoftwindows_101709cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
microsoftwindows_101803cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
microsoftwindows_101809cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
microsoftwindows_101903cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
microsoftwindows_101909cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*
microsoftwindows_7-cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*
microsoftwindows_server_2008-cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
microsoftwindows_server_2008r2cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*
microsoftwindows_server_2008r2cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
Rows per page:
1-10 of 161

Related

cvelist 4
prion 4
attackerkb 1
nvd 3
cve 4
cisa_kev 1
mscve 4
checkpoint_advisories 1
huawei 1
packetstorm 1
googleprojectzero 2
threatpost 2
krebs 1
thn 1
qualysblog 1
openvas 8
kaspersky 2
mskb 14
nessus 10
avleonov 1
cvelist
cvelist
CVE-2020-1000
2020-04-15 15:13:20
CVE-2020-1027
2020-04-15 15:13:29
CVE-2020-0913
2020-04-15 15:12:46
prion
prion
Privilege escalation
2020-04-15 15:15:00
Privilege escalation
2020-04-15 15:15:00
Privilege escalation
2020-04-15 15:15:00
attackerkb
attackerkb
CVE-2020-1027
2020-04-15 00:00:00
nvd
nvd
CVE-2020-1027
2020-04-15 15:15:21
CVE-2020-0913
2020-04-15 15:15:14
CVE-2020-1003
2020-04-15 15:15:20
cve
cve
CVE-2020-0913
2020-04-15 15:15:14
CVE-2020-1027
2020-04-15 15:15:21
CVE-2020-1000
2020-04-15 15:15:19
cisa_kev
cisa_kev
Microsoft Windows Kernel Privilege Escalation Vulnerability
2022-05-23 00:00:00
mscve
mscve
Windows Kernel Elevation of Privilege Vulnerability
2020-04-14 07:00:00
Windows Kernel Elevation of Privilege Vulnerability
2020-04-14 07:00:00
Windows Kernel Elevation of Privilege Vulnerability
2020-04-14 07:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Windows Kernel Elevation of Privilege (CVE-2020-1027)
2020-04-14 00:00:00
huawei
huawei
Security Advisory - Elevation of Privilege Vulnerability in Some Microsoft Windows Systems
2020-08-05 00:00:00
packetstorm
packetstorm
Windows sxs!CNodeFactory::XMLParser_Element_doc_assembly_assemblyIdentity Heap Buffer Overflow
2022-08-12 00:00:00
googleprojectzero
googleprojectzero
In-the-Wild Series: Windows Exploits
2021-01-12 00:00:00
Introducing the In-the-Wild Series
2021-01-12 00:00:00
threatpost
threatpost
Sophisticated Hacks Against Android, Windows Reveal Zero-Day Trove
2021-01-13 16:57:39
April Patch Tuesday: Microsoft Battles 4 Bugs Under Active Exploit
2020-04-14 19:45:49
krebs
krebs
Microsoft Patch Tuesday, April 2020 Edition
2020-04-14 22:24:10
thn
thn
Microsoft Issues Patches for 3 Bugs Exploited as Zero-Day in the Wild
2020-04-14 18:24:00
qualysblog
qualysblog
April 2020 Patch Tuesday – 113 Vulns, 19 Critical, Zero-Day Patches, SharePoint, Adobe ColdFusion
2020-04-14 18:34:04
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB4550922)
2020-04-15 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4549949)
2020-04-15 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB4549951)
2020-04-15 00:00:00
kaspersky
kaspersky
KLA11744 Multiple vulnerabilities in Microsoft Windows
2020-04-14 00:00:00
KLA11743 Multiple vulnerabilities in Microsoft products (ESU)
2020-04-14 00:00:00
mskb
mskb
April 14, 2020—KB4550922 (OS Build 17134.1425)
2020-04-14 07:00:00
April 14, 2020—KB4550957 (Security-only update)
2020-04-14 07:00:00
April 14, 2020—KB4549949 (OS Build 17763.1158)
2020-04-14 07:00:00
nessus
nessus
KB4550922: Windows 10 Version 1803 April 2020 Security Update
2020-04-14 00:00:00
KB4549949: Windows 10 Version 1809 and Windows Server 2019 April 2020 Security Update
2020-04-14 00:00:00
KB4549951: Windows 10 Version 1903 and Windows 10 Version 1909 April 2020 Security Update
2020-04-14 00:00:00
avleonov
avleonov
Microsoft Patch Tuesday April 2020: my classification script, confusing RCE in Adobe Type Manager and updates for older vulnerabilities
2020-04-26 01:24:38

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

31.4%

JSON
Related for NVD:CVE-2020-1000
cvelist4prion4attackerkb1nvd3cve4cisa_kev1mscve4checkpoint_advisories1huawei1packetstorm1googleprojectzero2threatpost2krebs1thn1qualysblog1openvas8kaspersky2mskb14nessus10avleonov1