{"@odata.context":"https://api.msrc.microsoft.com/sug/v2.0/sugodata/v2.0/en-US/$metadata#vulnerability/$entity","id":"00000000-0000-0000-0000-0000e99c7bb9","releaseDate":"2020-11-10T08:00:00Z","cveNumber":"CVE-2020-17087","cveTitle":"Windows Kernel Local Elevation of Privilege Vulnerability","releaseNumber":"2020-Nov","vulnType":"Security Vulnerability","latestRevisionDate":"2021-01-12T08:00:00Z","cweList":[],"cweDetailsListForSearch":[],"mitreText":"CVE-2020-17087","mitreUrl":"https://www.cve.org/CVERecord?id=CVE-2020-17087","publiclyDisclosed":"Yes","exploited":"Yes","latestSoftwareReleaseId":0,"latestSoftwareRelease":"Exploitation Detected","olderSoftwareReleaseId":0,"olderSoftwareRelease":"Exploitation Detected","denialOfService":"N/A","tag":"Windows Kernel","issuingCna":"Microsoft","issuingCnaId":0,"severityId":100000001,"severity":"Important","impactId":100000002,"impact":"Elevation of Privilege","langCode":"en-US","baseScore":"7.8","temporalScore":"7.2","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","vectorStringSource":"Microsoft","isMariner":false,"customerActionRequired":true,"customerActionRequiredId":0,"cweDetailsList":[],"articles":[],"revisions":[{"cveNumber":"CVE-2020-17087","version":1,"revisionDate":"2020-11-10T08:00:00Z","initialDate":"0001-01-01T00:00:00Z","description":"<p>Information published.</p>\n","unformattedDescription":"Information published.","notificationNeeded":false,"notificationSent":false,"sourceId":"324baa1c-7815-eb11-a829-000d3a6d3364"},{"cveNumber":"CVE-2020-17087","version":2,"revisionDate":"2021-01-12T08:00:00Z","initialDate":"0001-01-01T00:00:00Z","description":"<p>To comprehensively address CVE-2020-17087 for supported editions of Windows Server 2012, Microsoft is releasing security updates 4598278 (Monthly Rollup) and 4598297 (Security Only). We recommend that customers running Windows Server 2012 install the appropriate January 2021 update to be fully protected from this vulnerability.</p>\n","unformattedDescription":"To comprehensively address CVE-2020-17087 for supported editions of Windows Server 2012, Microsoft is releasing security updates 4598278 (Monthly Rollup) and 4598297 (Security Only). We recommend that customers running Windows Server 2012 install the appropriate January 2021 update to be fully protected from this vulnerability.","notificationNeeded":false,"notificationSent":false,"sourceId":"ba5861b9-b54f-eb11-a82c-000d3a6d35d9"}]}