CVE-2020-1457

—

CVSS 3.1

7.8 high

EPSS

12%p96

Published

Jul 27, 2020 (Jul 27, 2020)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1425.

Vendors: microsoft
Products: windows 10
Weakness: CWE-787
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (12.4%)

In the news4 stories

Microsoft fixes two RCE flaws affecting Windows 10 machines

Help Net SecurityJul 2, 00:00 UTC · Jul 2, 2020Vulnerability in the wildCVE-2020-1425 CVE-2020-1457

Microsoft issues two emergency security updates impacting Windows 10 and Windows Server

CyberScoopJul 1, 20:46 UTC · Jul 1, 2020Vulnerability CVE-2020-1425 CVE-2020-1457

Microsoft Releases Urgent Windows Update to Patch Two Critical Flaws

The Hacker NewsJul 1, 12:25 UTC · Jul 1, 2020Vulnerability in the wildCVE-2020-1425 CVE-2020-14571

Microsoft releases emergency security updates to fix codecs

Security AffairsJul 1, 08:57 UTC · Jul 1, 2020Vulnerability CVE-2020-1425 CVE-2020-1457