CVE-2020-1561HighCVSS 7.8
Microsoft Graphics Components Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code on a target system. To exploit the vulnerability, a user would have to open a specially crafted file. The security update addresses the vulnerability by correcting how Microsoft Graphics Components handle objects in memory.
🎯 Affected products29
- Windows 10 Version 1607 for 32-bit Systems
- Windows 10 Version 1607 for x64-based Systems
- Windows 10 Version 1709 for 32-bit Systems
- Windows 10 Version 1709 for ARM64-based Systems
- Windows 10 Version 1709 for x64-based Systems
- Windows 10 Version 1803 for 32-bit Systems
- Windows 10 Version 1803 for ARM64-based Systems
- Windows 10 Version 1803 for x64-based Systems
- Windows 10 Version 1809 for 32-bit Systems
- Windows 10 Version 1809 for ARM64-based Systems
- Windows 10 Version 1809 for x64-based Systems
- Windows 10 Version 1903 for 32-bit Systems
- Windows 10 Version 1903 for ARM64-based Systems
- Windows 10 Version 1903 for x64-based Systems
- Windows 10 Version 1909 for 32-bit Systems
- Windows 10 Version 1909 for ARM64-based Systems
- Windows 10 Version 1909 for x64-based Systems
- Windows 10 Version 2004 for 32-bit Systems
- Windows 10 Version 2004 for ARM64-based Systems
- Windows 10 Version 2004 for x64-based Systems
- Windows 10 for 32-bit Systems
- Windows 10 for x64-based Systems
- Windows Server 2016
- Windows Server 2016 (Server Core installation)
- Windows Server 2019
- Windows Server 2019 (Server Core installation)
- Windows Server, version 1903 (Server Core installation)
- Windows Server, version 1909 (Server Core installation)
- Windows Server, version 2004 (Server Core installation)
✅ Remediation
KB4566782 (Security Update) KB4571709 (Security Update) KB4565349 (Security Update) KB4565351 (Security Update) KB4571741 (Security Update) KB4571692 (Security Update) KB4571694 (Security Update)
🔗 References (11)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1561
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4566782
- referencehttps://support.microsoft.com/help/4566782
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4571709
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4565349
- referencehttps://support.microsoft.com/help/4565349
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4565351
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4571741
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4571692
- patchhttps://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB4571694
- referencehttps://support.microsoft.com/help/4571694