CVE-2020-1153
HighCVSS 7.8Exploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
Remote code execution vulnerability in Microsoft Graphics Components when handling objects in memory. An attacker could execute arbitrary code on a target system if a user opens a specially crafted file.
Risk Assessment
Risk of malicious code execution on the user's machine, potentially leading to data theft or malware installation.
Recommendation
Install the security update that corrects how Microsoft Graphics Components handle objects in memory.
Original NVD description (English source)
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafted file. The security update addresses the vulnerability by correcting how Microsoft Graphics Components handle objects in memory.