CVE-2020-1051
HighCVSS 7.8Exploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
A remote code execution vulnerability in Windows Jet Database Engine due to improper handling of objects in memory. An attacker could exploit it by enticing a victim to open a specially crafted file. The update corrects the way objects are handled in memory.
Risk Assessment
Successful exploitation could allow an attacker to execute arbitrary code on the victim's system, potentially leading to full system compromise.
Recommendation
Install the latest Windows security updates to mitigate this vulnerability.
Original NVD description (English source)
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory.