CVE-2020-1269 - An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'

Back Back to CVE browser

HIGH

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'

Published Jun 9, 2020

7.8

HIGH

CVSS 3.1

EPSS 1.01%

Description

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.

Affected products

Vendor Microsoft Product Windows Default
unknown
Affected
- 10 Version 1607 for 32-bit Systems
- 10 Version 1607 for x64-based Systems
- 10 Version 1709 for 32-bit Systems
- 10 Version 1709 for ARM64-based Systems
- 10 Version 1709 for x64-based Systems
- 10 Version 1803 for 32-bit Systems
- 10 Version 1803 for ARM64-based Systems
- 10 Version 1803 for x64-based Systems
- 10 Version 1809 for 32-bit Systems
- 10 Version 1809 for ARM64-based Systems
- 10 Version 1809 for x64-based Systems
- 10 for 32-bit Systems
- 10 for x64-based Systems
- 8.1 for 32-bit systems
- 8.1 for x64-based systems
- RT 8.1
Vendor Microsoft Product Windows 10 Version 1903 for 32-bit Systems Default
unknown
Affected
- unspecified
Vendor Microsoft Product Windows 10 Version 1903 for ARM64-based Systems Default
unknown
Affected
- unspecified
Vendor Microsoft Product Windows 10 Version 1903 for x64-based Systems Default
unknown
Affected
- unspecified
Vendor Microsoft Product Windows 10 Version 1909 for 32-bit Systems Default
unknown
Affected
- unspecified
Vendor Microsoft Product Windows 10 Version 1909 for ARM64-based Systems Default
unknown
Affected
- unspecified
Vendor Microsoft Product Windows 10 Version 1909 for x64-based Systems Default
unknown
Affected
- unspecified
Vendor Microsoft Product Windows 10 Version 2004 for 32-bit Systems Default
unknown
Affected
- unspecified
Vendor Microsoft Product Windows 10 Version 2004 for ARM64-based Systems Default
unknown
Affected
- unspecified
Vendor Microsoft Product Windows 10 Version 2004 for x64-based Systems Default
unknown
Affected
- unspecified
Vendor Microsoft Product Windows Server Default
unknown
Affected
- 2012 R2
- 2012 R2 (Core installation)
- 2016
- 2016 (Core installation)
- 2019
- 2019 (Core installation)
- version 1803 (Core Installation)
Vendor Microsoft Product Windows Server, version 1903 (Server Core installation) Default
unknown
Affected
- unspecified
Vendor Microsoft Product Windows Server, version 1909 (Server Core installation) Default
unknown
Affected
- unspecified
Vendor Microsoft Product Windows Server, version 2004 (Server Core installation) Default
unknown
Affected
- unspecified

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Windows	unknown	Affected 10 Version 1607 for 32-bit Systems 10 Version 1607 for x64-based Systems 10 Version 1709 for 32-bit Systems 10 Version 1709 for ARM64-based Systems 10 Version 1709 for x64-based Systems 10 Version 1803 for 32-bit Systems 10 Version 1803 for ARM64-based Systems 10 Version 1803 for x64-based Systems 10 Version 1809 for 32-bit Systems 10 Version 1809 for ARM64-based Systems 10 Version 1809 for x64-based Systems 10 for 32-bit Systems 10 for x64-based Systems 8.1 for 32-bit systems 8.1 for x64-based systems RT 8.1
Microsoft	Windows 10 Version 1903 for 32-bit Systems	unknown	Affected unspecified
Microsoft	Windows 10 Version 1903 for ARM64-based Systems	unknown	Affected unspecified
Microsoft	Windows 10 Version 1903 for x64-based Systems	unknown	Affected unspecified
Microsoft	Windows 10 Version 1909 for 32-bit Systems	unknown	Affected unspecified
Microsoft	Windows 10 Version 1909 for ARM64-based Systems	unknown	Affected unspecified
Microsoft	Windows 10 Version 1909 for x64-based Systems	unknown	Affected unspecified
Microsoft	Windows 10 Version 2004 for 32-bit Systems	unknown	Affected unspecified
Microsoft	Windows 10 Version 2004 for ARM64-based Systems	unknown	Affected unspecified
Microsoft	Windows 10 Version 2004 for x64-based Systems	unknown	Affected unspecified
Microsoft	Windows Server	unknown	Affected 2012 R2 2012 R2 (Core installation) 2016 2016 (Core installation) 2019 2019 (Core installation) version 1803 (Core Installation)
Microsoft	Windows Server, version 1903 (Server Core installation)	unknown	Affected unspecified
Microsoft	Windows Server, version 1909 (Server Core installation)	unknown	Affected unspecified
Microsoft	Windows Server, version 2004 (Server Core installation)	unknown	Affected unspecified

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00035.html
vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00063.html
vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12148
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1269
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00035.html		vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00063.html		vendor-advisoryx_refsource_SUSEMailing ListThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12148		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1269		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Jun 9, 2020

Updated Aug 4, 2024

Reserved Nov 4, 2019

Link CVE-2020-1269

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-1269

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Jun 9, 2020

Updated Aug 4, 2024

Link EUVD-2020-12148

GitHub

No data