A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2020-1054

Microsoft Win32k Privilege Escalation Vulnerability

Published
2021-11-03
Modified
2026-07-31
Sources
cisa-kev

Summary

Microsoft Win32k contains a privilege escalation vulnerability when the Windows kernel-mode driver fails to properly handle objects in memory. Successful exploitation allows an attacker to execute code in kernel mode.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.