CVE-2020-1237

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-06-09 · updated 2026-06-17

Description

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0986, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.

Affected products

Microsoft Windows 10 Version 1607: 1709, 1803, 1809, 1903, 1909, 2004
Microsoft Windows Server 2016: 1803, 1903, 1909, 2004
Microsoft Windows Server 2019: all versions

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1237
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1237

Get alerted when CVE-2020-1237 or the next vulnerability affects your stack