High severity7.8CISA KEVNVD Advisory· Published May 21, 2020· Updated Jun 17, 2026
CVE-2020-1054
CVE-2020-1054
Description
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1143.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
43cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*+ 4 more
- cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:x86:*
- cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:arm64:*
- cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*+ 1 more
- cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*+ 2 more
- cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:arm64:*
- cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*+ 2 more
- cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*
- cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*+ 2 more
- cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*
- cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*
cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*+ 2 more
- cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*
- cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x86:*
- cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_server_1909:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*
- cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
- Microsoft/Windows 10 Version 1903 for 32-bit Systemsv5Range: unspecified
- Microsoft/Windows 10 Version 1903 for ARM64-based Systemsv5Range: unspecified
- Microsoft/Windows 10 Version 1903 for x64-based Systemsv5Range: unspecified
- Microsoft/Windows 10 Version 1909 for 32-bit Systemsv5Range: unspecified
- Microsoft/Windows 10 Version 1909 for ARM64-based Systemsv5Range: unspecified
- Microsoft/Windows 10 Version 1909 for x64-based Systemsv5Range: unspecified
- Range: version 1803 (Core Installation)
- Microsoft/Windows Server, version 1903 (Server Core installation)v5Range: unspecified
- Microsoft/Windows Server, version 1909 (Server Core installation)v5Range: unspecified
Patches
Vulnerability mechanics
References
3- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1054nvdPatchVendor Advisory
- packetstormsecurity.com/files/160515/Microsoft-Windows-DrawIconEx-Local-Privilege-Escalation.htmlnvdExploitThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.