CVE-2020-1457: microsoft windows_10 Out-of-bounds Write
CVSS: 7.8v3.1HighModified
Published 27-07-2020Last modified 04-08-2024
Vulnerability summary
CVE-2020-1457 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in microsoft windows_10. EPSS estimates a 12.38% chance of exploitation in the next 30 days, higher than 96.1% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (NVD)EPSS score
12.38%
0%100%
Medium · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 27-07-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1425.
CVSS metrics
2 scores · 1 source · 2 versionsHigh 7.8Preferred score · NVD (NIST)
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HSourcesSingle source
Medium 6.8Preferred score · NVD (NIST)
AV:N/AC:M/Au:N/C:P/I:P/A:PSourcesSingle source
EPSS trend
Probability
12.38%
Chance of exploitation in the next 30 days
Percentile
96%
Versus all other CVEs
30-day change
0.00 pp
From 12.38% on 20-09-2026
20-09-202620-10-2026
EPSS score12.38%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Microsoft19 products
- windows_101709 | 1803 | 1809 | 1903 | 1909 | 2004
- windows 10 version 1709 for 32-bit systemsN/A
- windows 10 version 1709 for arm64-based systemsunspecified
- windows 10 version 1709 for x64-based systemsunspecified
- windows 10 version 1803 for 32-bit systemsunspecified
1 vendor · 19 products
References
2 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1457X Refsource MISCPatchVendor Advisory