CVE-2020-0691

CVE-2020-0691 is an elevation of privilege vulnerability in the Windows kernel-mode driver, affecting various versions of Windows 7, 8.1, 10, and Windows Server 2008 through 2019. It stems from improper handling of objects in memory. With a CVSS score of 7.8 (High), this vulnerability allows a local attacker with low privileges to achieve high impact on confidentiality, integrity, and availability, requiring no user interaction. There is currently no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, with only one article mentioning it as part of Microsoft's February 2020 Patch Tuesday.