What’s Vulnerable › Vulnerabilities

CVE-2020-14979

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-08-11 · updated 2026-06-17

Description

The WinRing0.sys and WinRing0x64.sys drivers 1.2.0 in EVGA Precision X1 through 1.0.6 allow local users, including low integrity processes, to read and write to arbitrary memory locations. This allows any user to gain NT AUTHORITY\SYSTEM privileges by mapping \Device\PhysicalMemory into the calling process.

Affected products

• Evga Precision X1: through 1.0.6
• Winring0 Project Winring0: 1.2.0

References

• https://posts.specterops.io/cve-2020-14979-local-privilege-escalation-in-evga-precisionx1-cf63c6b95896
• https://www.evga.com/precisionx1/
• https://posts.specterops.io/cve-2020-14979-local-privilege-escalation-in-evga-precisionx1-cf63c6b95896
• https://www.evga.com/precisionx1/

Get alerted when CVE-2020-14979 or the next vulnerability affects your stack