Permissions, Privileges, and Access Controls in Microsoft Windows and Windows Server - CVE-2020-0665

Vulnerability details

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists in Active Directory Forest trust due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest. A remote user can gain elevated privileges on the target system.

Affected software

How to mitigate CVE-2020-0665

Links to Public Exploits and PoC-codes

• Exploit #11318 - CVE-2020-0665 (Proof of Concept for CVE-2020-0665, a.k.a. SID Filter Bypass.) (April 18, 2025)

External References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0665

Related Security Bulletins

• Privilege escalation in Microsoft Active Directory
• Multiple vulnerabilities in Dell EMC Unisphere for PowerMax and Dell EMC Solutions Enabler