VYPR
← All advisories
Unrated severityNVD Advisory· Published May 21, 2020· Updated Aug 4, 2024

CVE-2020-1064

CVE-2020-1064

Description

A remote code execution vulnerability exists in the way that the MSHTML engine improperly validates input.An attacker could execute arbitrary code in the context of the current user, aka 'MSHTML Engine Remote Code Execution Vulnerability'.

Affected products

10
  • Microsoft/MSHTML Enginellm-create
  • Microsoft/Internet Explorercpe-rescue2 versions
    Windows 10 Version 1803 for 32-bit Systems+ 1 more
    • (no CPE)range: Windows 10 Version 1803 for 32-bit Systems
    • (no CPE)range: Windows Server 2008 for 32-bit Systems Service Pack 2
  • Microsoft/Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systemsv5
    Range: unspecified
  • Microsoft/Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Internet Explorer 11 on Windows 10 Version 1909 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Internet Explorer 11 on Windows 10 Version 1909 for ARM64-based Systemsv5
    Range: unspecified
  • Microsoft/Internet Explorer 11 on Windows 10 Version 1909 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Internet Explorer 11 on Windows Server 2012v5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.