CVE-2020-1425

A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1457...

CVE-2020-1425

Summary: CVE-2020-1425 and CVE-2020-1457 describe remote code execution vulnerabilities in Microsoft Windows Codecs Library due to memory-object handling. The CVE-2020-1425 entry reports a network-exploitable issue with CVSS v3.1 metrics: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H and CVSS v2 base score...

CVE-2020-1425

creationtimestamp| type| source ---|---|--- 2020-07-01 14:16:02+00:00| seen| https://t.me/truesecator/716 2020-07-02 07:21:19+00:00| seen| https://t.me/informationsecuritychannel/38909 2020-07-06 08:19:08+00:00| seen| https://t.me/SecLabNews/7991 2020-07-27 22:55:18+00:00| seen|...

Microsoft Releases Emergency Security Updates for Windows 10, Server

Microsoft has quietly pushed out two emergency security updates to fix remote code execution bugs in Microsoft Windows Codecs Library. Windows Codecs Library handles how the OS compresses large multimedia files such as photos and videos, and then decodes them for playback within applications. The...

Microsoft Releases Urgent Windows Update to Patch Two Critical Flaws

Microsoft yesterday quietly released out-of-band software updates to patch two high-risk security vulnerabilities affecting hundreds of millions of Windows 10 and Server editions' users. To be noted, Microsoft rushed to deliver patches almost two weeks before the upcoming monthly 'Patch Tuesday...

KLA11826 ACE vulnerabilities in Microsoft Windows

ACE vulnerabilities were found in Microsoft Windows. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2020-1457 CVE-2020-1425 Related products Microsoft-Windows Microsoft-Windows-10 CVE list CVE-2020-1457 high CVE-2020-1425 high KB list Solution...