CRITICAL 10.0 Microsoft PoC

CVE-2020-1472

Netlogon Elevation of Privilege Vulnerability

Microsoft Security Update 2020-Aug: Netlogon Elevation of Privilege Vulnerability

Affected Products

Windows Server, version 2004 (Server Core installation)
Windows Server 2019
Windows Server 2019 (Server Core installation)
Windows Server, version 1909 (Server Core installation)
Windows Server, version 1903 (Server Core installation)
Windows Server 2016
Windows Server 2016 (Server Core installation)
Windows Server 2008 R2 for x64-based Systems Service Pack 1

References

Published: 2020-08-11 · Source: Microsoft · Feed updated: 2026-08-21

This critical severity vulnerability with a CVSS score of 10.0 was published on 2020-08-11 via Microsoft. 🚨 A public proof-of-concept exploit is available on GitHub. EPSS score: 99.5% (top 0% of all CVEs by exploitation probability). Affected: Windows Server, version 2004 (Server Core installation), Windows Server 2019, Windows Server 2019 (Server Core installation) and 5 more.

Risk Timeline

CVE Disclosed2020-08-11 · 2200 days ago

Public PoC Exploit AvailableWeaponised proof-of-concept code is publicly accessible

Remediation Resources

Official Advisory

msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1472

NVD / MITRE

nvd.nist.gov/vuln/detail/CVE-2020-1472

Related Vulnerabilities

CVE	Title	Severity	CVSS
CVE-2026-33824 KEV PoC	Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution Vul	CRITICAL	9.8
CVE-2026-62815	Microsoft QUIC Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2026-62878	Windows DNS Server Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2026-62893	Windows Deployment Services TFTP Server Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2026-65791	Windows iSCSI Target Service Remote Code Execution Vulnerability	CRITICAL	9.8
CVE-2023-21803	Windows iSCSI Discovery Service Remote Code Execution Vulnerability	CRITICAL	9.8

vulnfeed aggregates 9909 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.