CVE-2020-0668
HIGH 7.8EPSS 25.9%
An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.
- Affected
- Microsoft · Windows · Windows Server · Windows 10 Version 1903 for 32-bit Systems · Windows 10 Version 1903 for x64-based Systems · Windows 10 Version 1903 for ARM64-based Systems · Windows Server, version 1903 (Server Core installation)
- CVSS v3.1 NVD
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - CVSS v2.0 NVD
- 7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C - EPSS
- 25.86% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2020-02-11
- Updated
- 2024-08-04
Proof-of-concept exploits (9)
- http://packetstormsecurity.com/files/156576/Microsoft-Windows-Kernel-Privilege-Escalation…
- http://packetstormsecurity.com/files/157615/Service-Tracing-Privilege-Escalation.html
- 0xSs0rZ/Windows_Exploit0★ · 2024-06-05
- Nan3r/CVE-2020-06686★ · 2020-06-02
- RedCursorSecurityConsulting/CVE-2020-0668238★ · 2020-02-20
- bypazs/CVE-2020-06682★ · 2021-10-30
- bypazs/CVE-2020-0668.exe2★ · 2021-10-30
- tussjump/cve_2020_06682★ · 2020-02-24
- ycdxsb/CVE-2020-066814★ · 2021-12-07
Metasploit modules (1)
Exploit collections (1)
- CVE-2020-0668helloexp/0day
Security advisories
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0668
- https://www.zerodayinitiative.com/advisories/ZDI-20-257