Vulnerability · NVD

CVE-2020-1574

CVE-2020-1574 : medium severity (CVSS 5.5). No tracked catalog app is linked to this CVE.

Severity (CVSS): 5.5
Exploitation: 2.6 %
Tracked apps: 0
Still exposed: 0

Published on 2020-08-17

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code.
Exploitation of the vulnerability requires that a program process a specially crafted image file.
The update addresses the vulnerability by correcting how Microsoft Windows Codecs Library handles objects in memory.

Attack vector : Local No user interaction

Show raw CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS 2.61% above median percentile 84.8%

OS versions that fix this CVE

This CVE is resolved by the following OS security releases. Update the OS to at least the listed version.

Windows 10 2004 · 2020-04 Fixed in -
Windows 10 1909 · 2019-09 Fixed in -

View on NVD ↗ Advisory · portal.msrc.microsoft.com

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM