7.8
High
CVE-2020-1150 A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory
Description
A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit a malicious webpage. The security update addresses the vulnerability by correcting how Windows Media Foundation handles objects in memory.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Windows | Versions not published | |
| Windows Server | Versions not published | |
| Windows 7 6.1 | 6.1.0 → latest | No fix stated |
| Windows 7 Service Pack 1 6.1 | 6.1.0 → latest | No fix stated |
| Windows Server 2008 R2 Service Pack 1 6.1 | 6.1.7601.0 → latest | No fix stated |
| Windows Server 2008 R2 Service Pack 1 (Server Core installation) 6.1 | 6.1.7601.0 → latest | No fix stated |
References
- Media Foundation Memory Corruption Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Windows
The 829 CVEs of Windows →
CVE-2022-50238
The on-endpoint Microsoft vulnerable driver blocklist is not fully synchronized with the online Microsoft recommended…
7.4
High
CVE-2025-59033
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy
7.4
High
CVE-2025-9491
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
7.0
High
CVE-2022-40733
An access violation vulnerability exists in the DirectComposition functionality win32kbase.sys driver version…
5.0
Medium