CVE-2020-1143
HighCVSS 7.0Exploitation Probability (EPSS)
Elevated risk68th percentile - higher than 68% of all known CVEs
Summary
Elevation of privilege vulnerability in Windows kernel-mode driver. An attacker logged on to the system can run a specially crafted application to execute arbitrary code in kernel mode, potentially installing programs, modifying data, or creating accounts with full user rights.
Risk Assessment
Full system compromise, including control over data and user accounts.
Recommendation
Install the security update that corrects how the kernel-mode driver handles objects in memory.
Other vulnerabilities in Windows kernel-mode driver
See all- CVE-2024-35250HighActively exploited
A vulnerability in the Windows kernel-mode driver allows elevation of privilege. This flaw can be exploited by a local attacker to gain system-level privileges.
- CVE-2024-30084High
A vulnerability in the Windows kernel-mode driver allows elevation of privilege. An attacker who successfully exploits it can gain SYSTEM privileges.
- CVE-2026-58602High
In Windows Kernel Mode Driver, a use-after-free vulnerability allows an authorized attacker to elevate privileges locally.
- CVE-2024-38256Medium
A vulnerability in Windows Kernel-Mode Driver allows information disclosure. An attacker could exploit this flaw to access data that should be protected.
Original NVD description (English source)
An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.