CVE-2020-1054

Win32k Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1143.

Affected

Microsoft · Windows 10 Version 1507 · Windows 10 Version 1607 · Windows 10 Version 1709 · Windows 10 Version 1709 for 32-bit Systems · Windows 10 Version 1803 · Windows 10 Version 1809

CVSS v3.1 MICROSOFT

7.0 HIGHCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

53.88% chance of exploitation in the next 30 days, 99th percentile

CISA KEV

added 2021-11-03

Published

2020-05-21

Updated

2026-10-07

Proof-of-concept exploits (5)

• http://packetstormsecurity.com/files/160515/Microsoft-Windows-DrawIconEx-Local-Privilege-…
• 0xeb-bp/cve-2020-105487★ · 2020-06-17
• Graham382/CVE-2020-10540★ · 2020-10-28
• Iamgublin/CVE-2020-10544★ · 2020-07-19
• KaLendsi/CVE-2020-105420★ · 2020-07-27

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve_2020_1054_draw…

Exploit collections (1)

• CVE-2020-1054helloexp/0day

Security advisories

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1054
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1054

References

• CVE Record
• NVD entry

Related

• CVE-2019-0708
• CVE-2020-0796
• CVE-2020-1015
• CVE-2020-16898
• CVE-2019-0803
• CVE-2020-1020