EXPOSURES › CVE-2020-17087
CVE-2020-17087
HIGH ⌖ ON CISA KEV · EXPLOITEDAn unpatched Windows kernel privilege escalation vulnerability (CVE-2020-17087) was actively exploited in the wild, allowing attackers to escalate privileges without remote code execution.
This unpatched kernel vulnerability allowed local privilege escalation, which DIB organizations must care about because it could be chained with other exploits to achieve remote code execution or data exfiltration. The fact that it was listed in CISA's KEV catalog proves it was actively exploited in the wild, indicating a failure to patch known vulnerabilities. Organizations should ensure all Windows systems are patched immediately and monitor for exploitation attempts.
Shame score — The vulnerability was unpatched and actively exploited in the wild, demonstrating a failure to patch known CVEs and a lack of effective vulnerability management.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation.
"CISA's Known Exploited Vulnerabilities (KEV) catalog is the authoritative list of security flaws that have been confirmed exploited in real-world attacks."
"Microsoft Windows kernel contains an unspecified vulnerability that allows for privilege escalation."
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |