CVE-2020-1425

—

CVSS 3.1

7.8 high

EPSS

9%p95

Published

Jul 27, 2020 (Jul 27, 2020)

Modified

Jun 17, 2026

Description

A remoted code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1457.

Vendors: microsoft
Products: windows 10
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (9.3%)

In the news5 stories

July 2020 Patch Tuesday forecast: Will the CVE trend continue?

Help Net SecurityJul 14, 19:58 UTC · Jul 14, 2020Vulnerability CVE-2020-1425 CVE-2020-1427

Microsoft fixes two RCE flaws affecting Windows 10 machines

Help Net SecurityJul 2, 00:00 UTC · Jul 2, 2020Vulnerability in the wildCVE-2020-1425 CVE-2020-1457

Microsoft issues two emergency security updates impacting Windows 10 and Windows Server

CyberScoopJul 1, 20:46 UTC · Jul 1, 2020Vulnerability CVE-2020-1425 CVE-2020-1457

Microsoft Releases Urgent Windows Update to Patch Two Critical Flaws

The Hacker NewsJul 1, 12:25 UTC · Jul 1, 2020Vulnerability in the wildCVE-2020-1425 CVE-2020-14571

Microsoft releases emergency security updates to fix codecs

Security AffairsJul 1, 08:57 UTC · Jul 1, 2020Vulnerability CVE-2020-1425 CVE-2020-1457