{"id":"CVE-2020-1054","revision":"c2328ec8b4b24b5d83476a3fbe072da9","records":[{"revision":"c2328ec8b4b24b5d83476a3fbe072da9","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2020-1054","aliases":[],"title":"Win32k Elevation of Privilege Vulnerability","description":"An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\nTo exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.\nThe update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.","state":0,"publishedAt":"2020-05-21T22:52:50+00:00","modifiedAt":"2026-10-07T17:30:41.211+00:00","affected":[{"ecosystem":"Vendor product","name":"Windows 10 Version 1507","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows 10 Version 1507\",\n                    \"platforms\": [\n                        \"32-bit Systems\",\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.10240.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows 10 Version 1607","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows 10 Version 1607\",\n                    \"platforms\": [\n                        \"32-bit Systems\",\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.14393.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows 10 Version 1709","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows 10 Version 1709\",\n                    \"platforms\": [\n                        \"ARM64-based Systems\",\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows 10 Version 1709 for 32-bit Systems","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows 10 Version 1709 for 32-bit Systems\",\n                    \"platforms\": [\n                        \"32-bit Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows 10 Version 1803","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows 10 Version 1803\",\n                    \"platforms\": [\n                        \"32-bit Systems\",\n                        \"ARM64-based Systems\",\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows 10 Version 1809","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows 10 Version 1809\",\n                    \"platforms\": [\n                        \"32-bit Systems\",\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.17763.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows 10 Version 1809","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows 10 Version 1809\",\n                    \"platforms\": [\n                        \"ARM64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows 10 Version 1903 for 32-bit Systems","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows 10 Version 1903 for 32-bit Systems\",\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows 10 Version 1903 for ARM64-based Systems","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows 10 Version 1903 for ARM64-based Systems\",\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows 10 Version 1903 for x64-based Systems","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows 10 Version 1903 for x64-based Systems\",\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows 10 Version 1909","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows 10 Version 1909\",\n                    \"platforms\": [\n                        \"32-bit Systems\",\n                        \"ARM64-based Systems\",\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows 7","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows 7\",\n                    \"platforms\": [\n                        \"32-bit Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.1.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows 7 Service Pack 1","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows 7 Service Pack 1\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.1.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows 8.1","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows 8.1\",\n                    \"platforms\": [\n                        \"32-bit Systems\",\n                        \"ARM64-based Systems\",\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.3.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2008 R2 Service Pack 1","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2008 R2 Service Pack 1\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.1.7601.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2008 R2 Service Pack 1 (Server Core installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2008 R2 Service Pack 1 (Server Core installation)\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.1.7601.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2008 Service Pack 2","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2008 Service Pack 2\",\n                    \"platforms\": [\n                        \"32-bit Systems\",\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.0.6003.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2008 Service Pack 2 (Server Core installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2008 Service Pack 2 (Server Core installation)\",\n                    \"platforms\": [\n                        \"32-bit Systems\",\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.0.6003.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2012","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2012\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.2.9200.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2012 (Server Core installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2012 (Server Core installation)\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.2.9200.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2012 R2","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2012 R2\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.3.9600.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2012 R2 (Server Core installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2012 R2 (Server Core installation)\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.3.9600.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2016","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2016\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.14393.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2016 (Server Core installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2016 (Server Core installation)\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.14393.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2019","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2019\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.17763.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server 2019 (Server Core installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server 2019 (Server Core installation)\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.17763.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server, version 1803  (Server Core Installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server, version 1803  (Server Core Installation)\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server, version 1903 (Server Core installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server, version 1903 (Server Core installation)\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Windows Server, version 1909 (Server Core installation)","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Microsoft\",\n                    \"product\": \"Windows Server, version 1909 (Server Core installation)\",\n                    \"platforms\": [\n                        \"x64-based Systems\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"10.0.0\",\n                            \"lessThan\": \"publication\",\n                            \"versionType\": \"custom\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C","score":7,"severity":"HIGH"}],"references":["https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1054"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2020-1054","license":"CVE Program Terms of Use","key":"cve-program:CVE-2020-1054","identifiers":["CVE-2020-1054"]},"retained":false,"historicalAffected":[]}],"coverage":[]}