ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

← Back to results

CVE-2020-17022

<p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code.</p> <p>Exploitation of the vulnerability requires that a program process a specially crafted image file.</p> <p>The update addresses the vulnerability by correcting how Microsoft Windows Codecs Library handles objects in memory.</p>
An official patch is available. Apply the patch as soon as possible.
7.8
CVSS
6.2
ShadowTrackr
NO
CISA KEV
-
NCSC.nl
CVSS v4.0 Metrics
Exploitability
Attack VectorLocal
ComplexityLow
RequirementsPresent
PrivilegesNone
User InteractionActive
Threat
Exploit MaturityPoC
Vulnerable System
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
Subsequent System
ConfidentialityNone
IntegrityNone
AvailabilityNone
Supplemental
SafetyNegligible
AutomatableYes
RecoveryAutomatic
Value DensityConcentrated
UrgencyMedium
Patch StatusOfficial Patch

Change Log
DateSourceChangesScore
2026-07-21nvdpatch: Unavailable→Official Patch6.2 → 6.2
2026-07-21cve.orginitial, patch: Unavailable6.2

Affected Software
VendorProductVersion
MicrosoftWindows 10 Version 1709N/A
MicrosoftWindows 10 Version 1709 for 32-bit SystemsN/A
MicrosoftWindows 10 Version 1803N/A
MicrosoftWindows 10 Version 1809N/A
MicrosoftWindows 10 Version 1903 for 32-bit SystemsN/A
MicrosoftWindows 10 Version 1903 for ARM64-based SystemsN/A
MicrosoftWindows 10 Version 1903 for x64-based SystemsN/A
MicrosoftWindows 10 Version 1909N/A
MicrosoftWindows 10 Version 2004N/A
microsoftwindows_101709
microsoftwindows_101803
microsoftwindows_101809
microsoftwindows_101903
microsoftwindows_101909
microsoftwindows_102004
Published: 2020-10-16