CVE-2020-1175
HighCVSS 7.8Exploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
Remote code execution vulnerability in Windows Jet Database Engine due to improper handling of objects in memory. An attacker could execute arbitrary code on a victim's system if the victim opens a specially crafted file.
Risk Assessment
Risk of malicious code execution on the victim's machine, potentially leading to system takeover or data theft.
Recommendation
Install the update that corrects how the Windows Jet Database Engine handles objects in memory.
Other vulnerabilities in Windows Jet Database Engine
See all- CVE-2020-1176High
Remote code execution vulnerability in Windows Jet Database Engine due to improper handling of objects in memory. An attacker could execute arbitrary code on a victim's system if the victim opens a specially crafted file.
- CVE-2020-1174High
A remote code execution vulnerability in Windows Jet Database Engine due to improper handling of objects in memory. An attacker could exploit it by enticing a victim to open a specially crafted file. The update corrects the way objects are handled in memory.
- CVE-2020-1051High
A remote code execution vulnerability in Windows Jet Database Engine due to improper handling of objects in memory. An attacker could exploit it by enticing a victim to open a specially crafted file. The update corrects the way objects are handled in memory.
Original NVD description (English source)
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS