CVE-2020-0691 - An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'

Back Back to CVE browser

HIGH

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'

Published Feb 11, 2020

7.8

HIGH

CVSS 3.1

EPSS 0.96%

Description

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723, CVE-2020-0724, CVE-2020-0725, CVE-2020-0726, CVE-2020-0731.

Affected products

Vendor Microsoft Product Windows Default
n/a
- Version
  10 Version 1607 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1607 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1709 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1709 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1709 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1803 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1803 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1803 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1809 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1809 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1809 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  7 for 32-bit Systems Service Pack 1
  Status
  affected
  Constraints
  -
- Version
  7 for x64-based Systems Service Pack 1
  Status
  affected
  Constraints
  -
- Version
  8.1 for 32-bit systems
  Status
  affected
  Constraints
  -
- Version
  8.1 for x64-based systems
  Status
  affected
  Constraints
  -
- Version
  RT 8.1
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1909 for 32-bit Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1909 for ARM64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1909 for x64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows Server Default
n/a
- Version
  2008 R2 for Itanium-Based Systems Service Pack 1
  Status
  affected
  Constraints
  -
- Version
  2008 R2 for x64-based Systems Service Pack 1
  Status
  affected
  Constraints
  -
- Version
  2008 R2 for x64-based Systems Service Pack 1 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  2008 for 32-bit Systems Service Pack 2
  Status
  affected
  Constraints
  -
- Version
  2008 for 32-bit Systems Service Pack 2 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  2008 for Itanium-Based Systems Service Pack 2
  Status
  affected
  Constraints
  -
- Version
  2008 for x64-based Systems Service Pack 2
  Status
  affected
  Constraints
  -
- Version
  2008 for x64-based Systems Service Pack 2 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  2012
  Status
  affected
  Constraints
  -
- Version
  2012 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  2012 R2
  Status
  affected
  Constraints
  -
- Version
  2012 R2 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  2016
  Status
  affected
  Constraints
  -
- Version
  2016 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  2019
  Status
  affected
  Constraints
  -
- Version
  2019 (Core installation)
  Status
  affected
  Constraints
  -
- Version
  version 1803 (Core Installation)
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows Server, version 1909 (Server Core installation) Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows

n/a

Version	Status	Constraints
10 Version 1607 for 32-bit Systems	affected	-
10 Version 1607 for x64-based Systems	affected	-
10 Version 1709 for 32-bit Systems	affected	-
10 Version 1709 for ARM64-based Systems	affected	-
10 Version 1709 for x64-based Systems	affected	-
10 Version 1803 for 32-bit Systems	affected	-
10 Version 1803 for ARM64-based Systems	affected	-
10 Version 1803 for x64-based Systems	affected	-
10 Version 1809 for 32-bit Systems	affected	-
10 Version 1809 for ARM64-based Systems	affected	-
10 Version 1809 for x64-based Systems	affected	-
10 for 32-bit Systems	affected	-
10 for x64-based Systems	affected	-
7 for 32-bit Systems Service Pack 1	affected	-
7 for x64-based Systems Service Pack 1	affected	-
8.1 for 32-bit systems	affected	-
8.1 for x64-based systems	affected	-
RT 8.1	affected	-

Microsoft

Windows 10 Version 1909 for 32-bit Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 1909 for ARM64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 1909 for x64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows Server

n/a

Version	Status	Constraints
2008 R2 for Itanium-Based Systems Service Pack 1	affected	-
2008 R2 for x64-based Systems Service Pack 1	affected	-
2008 R2 for x64-based Systems Service Pack 1 (Core installation)	affected	-
2008 for 32-bit Systems Service Pack 2	affected	-
2008 for 32-bit Systems Service Pack 2 (Core installation)	affected	-
2008 for Itanium-Based Systems Service Pack 2	affected	-
2008 for x64-based Systems Service Pack 2	affected	-
2008 for x64-based Systems Service Pack 2 (Core installation)	affected	-
2012	affected	-
2012 (Core installation)	affected	-
2012 R2	affected	-
2012 R2 (Core installation)	affected	-
2016	affected	-
2016 (Core installation)	affected	-
2019	affected	-
2019 (Core installation)	affected	-
version 1803 (Core Installation)	affected	-

Microsoft

Windows Server, version 1909 (Server Core installation)

n/a

Version	Status	Constraints
unspecified	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (1)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0691
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0691		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Feb 11, 2020

Updated Aug 4, 2024

Reserved Nov 4, 2019

Link CVE-2020-0691

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-0691

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-0691