CVE-2020-12986

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

An insufficient pointer validation vulnerability in the AMD Graphics Driver for Windows 10 may cause arbitrary code execution in the kernel, leading to escalation of privilege or denial of service.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
AMDAMD Radeon Software>= Radeon Software, < 20.7.1; >= Radeon Pro Software for Enterprise, < 21.Q2

References

Timeline

Published
Jun 11, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-129875.5A heap information leak/kernel pool address disclosure vulnerability in the AMD Graphics Driver for Windows 10 may lead to KASLR bypass.CVE-2020-129887.5A potential denial of service (DoS) vulnerability exists in the integrated chipset that may allow a malicious attacker to hang the system whCVE-2020-12998.8A remote code execution vulnerability exists in Microsoft Windows that could allow remote code execution if a .LNK file is processed.An attaCVE-2020-13008.8A remote code execution vulnerability exists when Microsoft Windows fails to properly handle cabinet files.To exploit the vulnerability, an CVE-2020-13018.8A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 1.0 (SMBv1) server handles certain requests,CVE-2020-13027.8An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operatioCVE-2020-13035.5<p>An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory. An attacker who successfullCVE-2020-13047.8An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationCVE-2020-13057.8An elevation of privilege vulnerability exists when the Windows State Repository Service improperly handles objects in memory, aka 'Windows CVE-2020-13067.8An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka 'Windows Runtime ElevationCVE-2020-13077.8An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel ElevaCVE-2020-13087.0<p>An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory. An attacker who successfully exploited
CVE-2020-12986: High severity, CVSS 7.8 | Vulnix