CVE-2020-1175
HighCVSS 7.8Exploitation Probability (EPSS)
Very high risk96th percentile - higher than 96% of all known CVEs
Summary
Remote code execution vulnerability in Windows Jet Database Engine due to improper handling of objects in memory. An attacker could execute arbitrary code on a victim's system if the victim opens a specially crafted file.
Risk Assessment
Risk of malicious code execution on the victim's machine, potentially leading to system takeover or data theft.
Recommendation
Install the update that corrects how the Windows Jet Database Engine handles objects in memory.
Original NVD description (English source)
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory.