CVE-2020-0668

Description

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0669, CVE-2020-0670, CVE-2020-0671, CVE-2020-0672.

Affected products

Vendor	Product	Affected	Fixed
Microsoft	Windows	10 Version 1803 for 32-bit Systems, 10 Version 1803 for x64-based Systems, 10 Version 1803 for ARM64-based Systems, 10 Version 1809 for 32-bit Systems, 10 Version 1809 for x64-based Systems, 10 Version 1809 for ARM64-based Systems, 10 Version 1709 for 32-bit Systems, 10 Version 1709 for x64-based S…	—
Microsoft	Windows Server	version 1803 (Core Installation), 2019, 2019 (Core installation), 2016, 2016 (Core installation), 2008 for 32-bit Systems Service Pack 2, 2008 for 32-bit Systems Service Pack 2 (Core installation), 2008 for Itanium-Based Systems Service Pack 2, 2008 for x64-based Systems Service Pack 2, 2008 for x6…	—
Microsoft	Windows 10 Version 1903 for 32-bit Systems	unspecified	—
Microsoft	Windows 10 Version 1903 for x64-based Systems	unspecified	—
Microsoft	Windows 10 Version 1903 for ARM64-based Systems	unspecified	—
Microsoft	Windows Server, version 1903 (Server Core installation)	unspecified	—
Microsoft	Windows 10 Version 1909 for 32-bit Systems	unspecified	—
Microsoft	Windows 10 Version 1909 for x64-based Systems	unspecified	—
Microsoft	Windows 10 Version 1909 for ARM64-based Systems	unspecified	—
Microsoft	Windows Server, version 1909 (Server Core installation)	unspecified	—

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Metasploit 1 module

Service Tracing Privilege Elevation Vulnerability
exploit/windows/local/cve_2020_0668_service_tracing

GitHub 6 repositories

RedCursorSecurityConsulting/CVE-2020-0668 ★ 240 · Feb 20, 2020

Use CVE-2020-0668 to perform an arbitrary privileged file move operation.
ycdxsb/CVE-2020-0668 ★ 14 · Oct 28, 2021

Make CVE-2020-0668 exploit work for version < win10 v1903 and version >= win10 v1903
Nan3r/CVE-2020-0668 ★ 6 · Feb 26, 2020

CVE-2020-0668
bypazs/CVE-2020-0668.exe ★ 2 · Oct 30, 2021
modulexcite/SysTracingPoc ★ 2 · Feb 27, 2020

CVE-2020-0668 - Microsoft Windows Service Tracing Arbitrary File Move Local Privilege Escalation Vulnerability
0xSs0rZ/Windows_Exploit ★ 0 · Jun 5, 2024

CVE-2021-1675/CVE-2021-34527 PrintNightmare & CVE-2020-0668

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

An elevation of privilege vulnerability exists in the way that the Windows Kernel handles objects in memory, aka 'Windows Kernel Elevation …