Vulnerabilities > CVE-2020-1409 - Unspecified vulnerability in Microsoft products

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

microsoft

NVD

Published: 2020-07-14

Updated: 2021-07-21

Summary

A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.

Vulnerable Configurations

Part	Description	Count
OS	Microsoft Microsoft Windows 10 - Microsoft Windows 10 1607 Microsoft Windows 10 1709 Microsoft Windows 10 1803 Microsoft Windows 10 1809 Microsoft Windows 10 1903 Microsoft Windows 10 1909 Microsoft Windows 10 2004 Microsoft Windows 7 - Microsoft Windows Server 2012 R2 Microsoft Windows Server 2012 - Microsoft Windows Server 2016 - Microsoft Windows Server 2016 1903 Microsoft Windows Server 2016 1909 Microsoft Windows Server 2016 2004 Microsoft Windows RT 8.1 - Microsoft Windows Server 2008 - Microsoft Windows 8.1 - Microsoft Windows Server 2019 -	36

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1409