VDB

CVE-2020-1587

CVE-2020-1587 PUBLISHED CVSS 7.199999809265137 HIGH

An elevation of privilege vulnerability exists when the Windows Ancillary Function Driver for WinSock improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The security update addresses the vulnerability by correcting how the Windows Ancillary Function Driver for WinSock handles memory.

EPSS 0.40% · 61.0th percentile

Risk Scores

CVSS v2.0
7.199999809265137
EPSS Score
0.40%
61.0th percentile

Affected Products

VendorProductVersions
MicrosoftWindows Server, version 1909 (Server Core installation)10.0.0
MicrosoftWindows 10 Version 1709 for 32-bit Systems10.0.0
MicrosoftWindows Server 2012 R2 (Server Core installation)6.3.0
MicrosoftWindows Server 2008 Service Pack 2 (Server Core installation)6.0.0
MicrosoftWindows Server 2016 (Server Core installation)10.0.0
microsoftwindows_server_2019
MicrosoftWindows Server 2012 (Server Core installation)6.2.0
MicrosoftWindows 10 Version 160710.0.0
MicrosoftWindows Server 2008 R2 Service Pack 1 (Server Core installation)6.0.0
MicrosoftWindows 10 Version 200410.0.0
MicrosoftWindows Server, version 1903 (Server Core installation)10.0.0
MicrosoftWindows Server 2019 (Server Core installation)10.0.0
microsoftwindows_server_2008r2
microsoftwindows_rt_8.1
MicrosoftWindows Server 201910.0.0
MicrosoftWindows 10 Version 1903 for 32-bit Systems10.0.0
MicrosoftWindows Server 201610.0.0
microsoftwindows_8.1
MicrosoftWindows Server 2008 Service Pack 26.0.0
microsoftwindows_102004, 1709, 1809

…and 18 more

Timeline

  • Aug 12, 2020 CVE Published
  • Sep 17, 2020 PoC Published
  • Oct 3, 2020 PoC Published
  • Jan 10, 2021 PoC Published
  • Apr 14, 2021 EPSS Score
  • Jun 22, 2021 EPSS Score
  • Jun 22, 2021 PoC Published
  • Aug 24, 2021 EPSS Score
  • Dec 27, 2021 EPSS Score
  • Jan 6, 2022 EPSS Score
  • Feb 4, 2022 EPSS Score
  • Feb 27, 2022 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›