CVE-2020-1281

—

CVSS 3.1

8.8 high

EPSS

14%p96

Published

Jun 9, 2020 (Jun 9, 2020)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input, aka 'Windows OLE Remote Code Execution Vulnerability'.

Vendors: microsoft
Products: windows 10, windows 7, windows 8.1, windows rt 8.1, windows server 2008, windows server 2012, windows server 2016, windows server 2019
Weakness: CWE-190, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (14.5%)

In the news2 stories

Microsoft’s Mega Patch Tuesday is Largest Ever

Infosecurity MagazineJun 10, 10:30 UTC · Jun 10, 2020Vulnerability in the wildCVE-2020-1281 CVE-2017-0199 CVE-2020-1181

June 2020 Patch Tuesday: Microsoft fixes record monthly number of CVEs

Help Net SecurityJun 9, 00:00 UTC · Jun 9, 2020Vulnerability in the wildCVE-2020-1299 CVE-2020-1300 CVE-2020-1281+6 CVEs