Skip to content
fr Sign in
7.8 High

CVE-2020-1560 A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory

Description

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Exploitation of the vulnerability requires that a program process a specially crafted image file. The update addresses the vulnerability by correcting how Microsoft Windows Codecs Library handles objects in memory.

Affected products and versions

Product Affected versions Fixed in
Windows 10 Version 2004 Versions not published
Windows Server version 2004 Versions not published
Windows 10 Version 1803 Versions not published
Windows 10 Version 1809 Versions not published
Windows 10 Version 1909 Versions not published
Windows 10 Version 1709 for 32-bit Systems Versions not published
Windows 10 Version 1709 Versions not published
Windows 10 Version 1903 for 32-bit Systems Versions not published
Windows 10 Version 1903 for x64-based Systems Versions not published
Show the other branch
Product Affected versions Fixed in
Windows 10 Version 1903 for ARM64-based Systems Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Windows 10 Version 2004

The 757 CVEs of Windows 10 Version 2004 →
CVE-2021-43893 Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability 7.5 High CVE-2021-43883 Windows Installer Elevation of Privilege Vulnerability 7.8 High CVE-2021-43248 Windows Digital Media Receiver Elevation of Privilege Vulnerability 7.8 High CVE-2021-43247 Windows TCP/IP Driver Elevation of Privilege Vulnerability 7.8 High
Track this CVE