{"id":"CVE-2020-1054","title":"An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory","summary":"An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. …","severity":"high","cvss":7,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-787","CWE-787"],"vendor":"microsoft","product":"windows_10_1507","affected":["windows_10_1507","windows_10_1607","windows_10_1709","windows_10_1803","windows_10_1809","windows_10_1903","windows_10_1909","windows_7","windows_8.1","windows_rt_8.1","windows_server_1803","windows_server_1903","windows_server_1909","windows_server_2008","windows_server_2008 = r2","windows_server_2012","windows_server_2012 = r2","windows_server_2016","windows_server_2019"],"published":"2020-05-21","updated":"2026-08-19","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2020-1054","references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1054","label":"secure@microsoft.com"},{"url":"http://packetstormsecurity.com/files/160515/Microsoft-Windows-DrawIconEx-Local-Privilege-Escalation.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1054","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-1054","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","kev","in-the-wild","exploit-available"],"epss":0.54158,"epssPercentile":0.98984,"kev":true,"kevDateAdded":"2021-11-03","kevDueDate":"2022-05-03","kevRansomware":false,"exploited":true,"ingestedAt":"2026-08-19T17:42:36.439Z","exploits":{"github":4,"githubRepos":["https://github.com/0xeb-bp/cve-2020-1054","https://github.com/Iamgublin/CVE-2020-1054","https://github.com/KaLendsi/CVE-2020-1054"],"metasploit":["exploit/windows/local/cve_2020_1054_drawiconex_lpe"],"checkedAt":"2026-09-21T15:23:44.365Z"},"exploitAvailable":true,"slug":"CVE-2020-1054","body":"## Overview\n\nAn elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.\nTo exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and take control of an affected system.\nThe update addresses this vulnerability by correcting how the Windows kernel-mode driver handles objects in memory.\n\n## Affected\n\n- `windows_10_1507`\n- `windows_10_1607`\n- `windows_10_1709`\n- `windows_10_1803`\n- `windows_10_1809`\n- `windows_10_1903`\n- `windows_10_1909`\n- `windows_7`\n- `windows_8.1`\n- `windows_rt_8.1`\n- `windows_server_1803`\n- `windows_server_1903`\n- `windows_server_1909`\n- `windows_server_2008`\n- `windows_server_2008 = r2`\n- `windows_server_2012`\n- `windows_server_2012 = r2`\n- `windows_server_2016`\n- `windows_server_2019`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":74,"depthScoreParts":{"impact":38.5,"likelihood":10.8,"exploitation":25,"ransomware":0},"changes":[{"seq":4467,"id":"CVE-2020-1054","ts":1788887181757,"field":"exploit_available","old":"false","new":"true"},{"seq":3350,"id":"CVE-2020-1054","ts":1788886300820,"field":"exploit_available","old":"true","new":"false"},{"seq":2205,"id":"CVE-2020-1054","ts":1788882970589,"field":"exploit_available","old":"false","new":"true"},{"seq":1234,"id":"CVE-2020-1054","ts":1788882382108,"field":"exploit_available","old":"true","new":"false"},{"seq":348,"id":"CVE-2020-1054","ts":1788881816739,"field":"exploit_available","old":"false","new":"true"}]}