Skip to main content
cvebuzz

CVE mentions, exploit signals, and PoC evidence in one fast public view.

CVE detail

CVE-2020-0986

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1237, CVE-2020-1246, CVE-2020-1262, CVE-2020-1264, CVE-2020-1266, CVE-2020-1269, CVE-2020-1273, CVE-2020-1274, CVE-2020-1275, CVE-2020-1276, CVE-2020-1307, CVE-2020-1316.

CVSS 7.8 · HighBuzz score 57.3KEV listed

Buzz score

Why this CVE is surfacing

Buzz score total 57.3

This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.

Buzz score components · mention 20.8 · diversity 11.5 · KEV 25.0 · OTX 0.0 · PoC 0.0
Mention score
20.8
7 evidence mentions in the snapshot
Diversity score
11.5
3 sources across 2 categories
KEV score
25.0
Known exploited vulnerability present
OTX score
0.0
0 OTX pulses
PoC score
0.0
0 repos · best confidence N/A
Best PoC traction
0
Maximum stars on a matched PoC repo

Why it matters now

Mention timeline

Total mentions
0
within the 30d window
Peak daily
0
highest bucket

Evidence

Source links by recency

Newest mentions first
7 source links · newest first
  • 28th December – Threat Intelligence ReportCheck Point Research

    For the latest discoveries in cyber research for the week of 28th December, please download our Threat Intelligence Bulletin. Top Attacks and Breaches Lazarus group, an APT affiliated with North Korea, has targeted two healthcare entities – Ministry of Health and a pharmaceutical company involved in a COVID-19 vaccine development, probably in order to collect […]

    vendorresearch.checkpoint.comDec 28, 2020, 4:00 PM
  • Google: Microsoft Improperly Patched Exploited Windows VulnerabilitySecurityWeek

    Google Project Zero has disclosed a Windows zero-day vulnerability caused by the improper fix for CVE-2020-0986, a security flaw abused in a campaign dubbed Operation PowerFall.

    newswww.securityweek.comDec 28, 2020, 1:15 PM
  • Google reported that Microsoft failed to fix a Windows zero-day flawSecurity Affairs

    Google’s Project Zero experts publicly disclosed details of an improperly patched zero-day code execution vulnerability in Windows. White hat hackers at Google’s Project Zero team has publicly disclosed details of an improperly patched zero-day vulnerability in Windows. The vulnerability tracked as CVE-2020-0986, resides in the Print Spooler API and could be exploited by a threat […]

    newssecurityaffairs.comDec 24, 2020, 1:08 PM
  • Windows and IE Zero-Day Vulnerabilities Chained in ‘PowerFall’ AttacksSecurityWeek

    An attack launched in May 2020 against a South Korean company involved an exploit that chained zero-day vulnerabilities in Windows and Internet Explorer, Kaspersky reported on Wednesday.

    newswww.securityweek.comAug 12, 2020, 4:09 PM
  • 25th May – Threat Intelligence BulletinCheck Point Research

    For the latest discoveries in cyber research for the week of 25th May 2020, please download our Threat Intelligence Bulletin. Top Attacks and Breaches Thousands of Israeli websites have been defaced in an Anti-Israeli Campaign carried out by the “Hacker of Savior” group. All websites were hosted on a local Israeli hosting company called uPress, […]

    vendorresearch.checkpoint.comMay 25, 2020, 2:19 PM
  • Researchers disclose five Microsoft Windows zero-daysSecurity Affairs

    Security experts have disclosed five unpatched vulnerabilities in Microsoft Windows, four of which rated as high-risk severity. Security experts from Trend Micro’s Zero Day Initiative (ZDI) have published information on five unpatched vulnerabilities in Microsoft Windows. Four vulnerabilities are classified as high-risk severity, three of them are zero-day vulnerabilities tracked as CVE-2020-0916, CVE-2020-0986, and CVE-2020-0915. The flaws […]

    newssecurityaffairs.comMay 20, 2020, 11:45 AM
  • Researchers Divulge Details on Five Windows Zero DaysSecurityWeek

    Zero Day Initiative Researchers Publish Five Windows Zero Days

    newswww.securityweek.comMay 19, 2020, 5:47 PM

Exploit code

Public exploit repository references

Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.

0 repository references · best confidence N/A · max 0 stars
No public PoC repositories have been matched yet.

Related records

Similar CVEs

6 related CVEs with shared weakness or product evidence