IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
7.8High

CVE-2020-17022Microsoft Windows Codecs Library Remote Code Execution Vulnerability

Microsoft Windows 10 Version 1803; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 1909; Microsoft Windows 10 Version 1709 for 32-bit Systems Published: (6 years ago)

Description

<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code.</p> <p>Exploitation of the vulnerability requires that a program process a specially crafted image file.</p> <p>The update addresses the vulnerability by correcting how Microsoft Windows Codecs Library handles objects in memory.</p>

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
Microsoft Windows 10 Version 1709 N/A
Microsoft Windows 10 Version 1709 for 32-bit Systems N/A
Microsoft Windows 10 Version 1803 N/A
Microsoft Windows 10 Version 1809 N/A
Microsoft Windows 10 Version 1903 for 32-bit Systems N/A
Microsoft Windows 10 Version 1903 for ARM64-based Systems N/A
Microsoft Windows 10 Version 1903 for x64-based Systems N/A
Microsoft Windows 10 Version 1909 N/A
Microsoft Windows 10 Version 2004 N/A

References and patches

Recent CVEs in the same product — Windows 10

7.8High
CVE-2026-119382

Windows TPM Elevation of Privilege Vulnerability

Microsoft Windows 10 Version 1607; Microsoft Windows 10 Version 1809; Microsoft Windows 10 Version 21H2; Microsoft Windows 10 Version 22H2

Heap-based buffer overflow in Windows TPM allows an authorized attacker to elevate privileges locally.