CVE-2020-1561: microsoft windows_10
Vulnerability summary
CVE-2020-1561 is a high (CVSS 9.3) vulnerability in microsoft windows_10. EPSS estimates a 4.26% chance of exploitation in the next 30 days, higher than 91% of scored vulnerabilities.
Timeline
- 17-08-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafted file. The security update addresses the vulnerability by correcting how Microsoft Graphics Components handle objects in memory.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
4.26%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.26% on 22-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft19 products
- windows_10na | 1607 | 1709 | 1803 | 1809 | 1903 | 1909 | 2004
- windows 10 version 1507≥ 10.0.0, < publication
- windows 10 version 1607≥ 10.0.0, < publication
- windows 10 version 1709≥ 10.0.0, < publication
- windows 10 version 1709 for 32-bit systems≥ 10.0.0, < publication
1 vendor · 19 products
References
1 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1561X Refsource MISCPatchVendor Advisory