CVE-2020-1054

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 0/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.

CISA Known Exploited Vulnerability

Vendor / Product Microsoft — Win32k

Date Added 2021-11-03

Remediation Due 2022-05-03

https://nvd.nist.gov/vuln/detail/CVE-2020-1054

Weakness Classification (1)

CWE-787

Affected Software (32)

Vendor	Product	Version
microsoft	windows_10_1507	-
microsoft	windows_10_1507	-
microsoft	windows_10_1607	-
microsoft	windows_10_1607	-
microsoft	windows_10_1709	-
microsoft	windows_10_1709	-
microsoft	windows_10_1709	-
microsoft	windows_10_1803	-
microsoft	windows_10_1803	-
microsoft	windows_10_1803	-
microsoft	windows_10_1809	-
microsoft	windows_10_1809	-
microsoft	windows_10_1809	-
microsoft	windows_10_1903	-
microsoft	windows_10_1903	-
microsoft	windows_10_1903	-
microsoft	windows_10_1909	-
microsoft	windows_10_1909	-
microsoft	windows_10_1909	-
microsoft	windows_7	-
microsoft	windows_8.1	-
microsoft	windows_rt_8.1	-
microsoft	windows_server_1803	-
microsoft	windows_server_1903	-
microsoft	windows_server_1909	-
microsoft	windows_server_2008	-
microsoft	windows_server_2008	r2
microsoft	windows_server_2008	r2
microsoft	windows_server_2012	-
microsoft	windows_server_2012	r2