Detections
Analytics
CVE-2020-17087
high
Description
Windows Kernel Local Elevation of Privilege Vulnerability
From the Tenable Blog
Microsoft’s November 2020 Patch Tuesday Addresses 112 CVEs including CVE-2020-17087
Published: 2020-11-10
Microsoft addressed over 112 CVEs in its November release, including a zero-day vulnerability in the Windows kernel that was exploited in the wild as part of a targeted attack.
CVE-2020-15999, CVE-2020-17087: Google Chrome FreeType and Microsoft Windows Kernel Zero Days Exploited in the Wild
Published: 2020-11-02
A pair of zero-day vulnerabilities in Google Chrome (CVE-2020-15999) and Microsoft Windows (CVE-2020-17087) were chained together and exploited in the wild in targeted attacks. A separate Chrome vulnerability (CVE-2020-16009) has also been exploited in the wild.
References
https://www.tenable.com/cyber-exposure/2020-threat-landscape-retrospective
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17087