VYPR
← All advisories
High severity8.8NVD Advisory· Published Aug 17, 2020· Updated Jun 17, 2026

CVE-2020-1561

CVE-2020-1561

Description

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafted file. The security update addresses the vulnerability by correcting how Microsoft Graphics Components handle objects in memory.

Affected products

22
  • Microsoft/Windows 10 1809v52 versions
    cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*+ 1 more
    • cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*range: 10.0.0
    • cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*range: 10.0.0
  • Microsoft/Windows Server 2019v52 versions
    cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*range: 10.0.0
    • cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*
  • Microsoft/Windows 10 1909v512 versions
    cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*+ 11 more
    • cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*range: 10.0.0
    • cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x86:*
    • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x86:*
    • cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*range: 10.0.0
  • Microsoft/Windows 10 1607v5
    cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
    Range: 10.0.0
  • Microsoft/Microsoft Graphics Componentsllm-fuzzy
  • Microsoft/Windows Server 20164 versions
    cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.