Microsoft Windows Kernel Elevation of Privilege Vulnerability (CVE-2020-17008)

Microsoft Windows is prone to an elevation of privilege vulnerability. This VT has been deprecated and replaced by the following VTs covering the new CVE-2021-1648: - OID: 1.3.6.1.4.1.25623.1.0.817573 - OID: 1.3.6.1.4.1.25623.1.0.817569 - OID: 1.3.6.1.4.1.25623.1.0.817568 SPDX-FileCopyrightText:...

CVE-2020-17008 splWOW64 Elevation of Privilege Patch Bypass

This CVE is the result of a patch bypass for CVE-2020-0986, reported to Microsoft by Kaspersky in December 2019 and patched in June 2020. Google Project Zero researcher Maddie Stone notified Microsoft on September 24, 2020 that the fix for Kaspersky’s reported vulnerability was incomplete...

CVE-2020-17008

creationtimestamp| type| source ---|---|--- 2020-12-24 18:35:13+00:00| seen| https://t.me/xakepru/10193 2020-12-25 14:29:00+00:00| exploited| https://t.me/truesecator/1294 2020-12-26 06:00:14+00:00| seen| https://t.me/haccking/94641 2020-12-26 07:00:11+00:00| seen| https://t.me/haccking/5781...

Windows Zero-Day Still Circulating After Faulty Fix

A high-severity Windows zero-day that could lead to complete desktop takeover remains dangerous after a “fix” from Microsoft failed to adequately patch it. The local privilege-escalation bug in Windows 8.1 and Windows 10 CVE-2020-0986 exists in the Print Spooler API. It could allow a local attack...