StatsFirst seenJune 2023Last seenSeptember 2026CVEsCVE-2020-1027Alert name variantsAlert NameEngineWin32.Exploit.CVE-2020-1027ATP Sandbox Adv. HeuristicsRelated IPS SignaturesSignature NameEngineOS-WINDOWS Microsoft Windows Kernel CSRSS privilege escalation attemptIPS-CFWRelated familiesMicrosoft