EXPOSURES › CVE-2020-0986
CVE-2020-0986
HIGH ⌖ ON CISA KEV · EXPLOITEDAn unpatched Windows kernel privilege escalation flaw allowed attackers to execute arbitrary code in kernel mode.
This vulnerability enabled attackers to escalate privileges and execute code in kernel mode on Windows systems, posing a severe risk to DIB organizations relying on Microsoft hardware and software. The failure stems from an unpatched kernel flaw that was actively exploited in the wild, highlighting the critical need for timely patch management and rigorous supply-chain validation. DIB orgs must ensure all Windows endpoints are patched and consider alternative hardware/software vendors to mitigate exposure to such high-impact, avoidable failures.
Shame score — The vulnerability was unpatched and actively exploited in the wild, representing a negligent failure to protect widely deployed systems from a known, high-impact threat.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode.
"Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode."
"Microsoft CVEs and Security Vulnerabilities - OpenCVE"
"Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode."
"Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode."
"Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode."
"Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode."
"Microsoft Windows kernel contains an unspecified vulnerability when handling objects in memory that allows attackers to escalate privileges and execute code in kernel mode."
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |