CVE-2020-1054

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system. The update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.

• CWE-787
• CWE-787

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1054Patch, Vendor Advisory
• https://packetstormsecurity.com/files/160515/Microsoft-Windows-DrawIconEx-Local-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1054Patch, Vendor Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1054US Government Resource

Published

May 21, 2020

Last Modified

Oct 8, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10532The AD Helper component in WatchGuard Fireware before 5.8.5.…7.5
• CVE-2020-10534In the GlobalBlocking extension before 2020-03-10 for MediaW…9.8
• CVE-2020-10535GitLab 12.8.x before 12.8.6, when sign-up is enabled, allows…5.3
• CVE-2020-10537An issue was discovered in Epikur before 20.1.1. A Glassfish…7.8
• CVE-2020-10538An issue was discovered in Epikur before 20.1.1. It stores t…5.5
• CVE-2020-10539An issue was discovered in Epikur before 20.1.1. The Epikur …9.8
• CVE-2020-10540Untis WebUntis before 2020.9.6 allows CSRF for certain combi…8.8
• CVE-2020-10541Zoho ManageEngine OpManager before 12.4.179 allows remote co…9.8
• CVE-2020-10543Perl before 5.30.3 on 32-bit platforms allows a heap-based b…8.2
• CVE-2020-10544An XSS issue was discovered in tooltip/tooltip.js in PrimeTe…6.1
• CVE-2020-10546rConfig 3.9.4 and previous versions has unauthenticated comp…9.8
• CVE-2020-10547rConfig 3.9.4 and previous versions has unauthenticated comp…9.8