CVE-2020-1409
CVE-2020-1409
Vexday Risk Score
8Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 11.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
14 jul 2020Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory, aka 'DirectWrite Remote Code Execution Vulnerability'.
Productos afectados
Microsoft · Microsoft OfficeMicrosoft · WindowsMicrosoft · Windows 10 Version 1903 for 32-bit SystemsMicrosoft · Windows 10 Version 1903 for ARM64-based SystemsMicrosoft · Windows 10 Version 1903 for x64-based SystemsMicrosoft · Windows 10 Version 1909 for 32-bit SystemsMicrosoft · Windows 10 Version 1909 for ARM64-based SystemsMicrosoft · Windows 10 Version 1909 for x64-based SystemsMicrosoft · Windows 10 Version 2004 for 32-bit SystemsMicrosoft · Windows 10 Version 2004 for ARM64-based SystemsMicrosoft · Windows 10 Version 2004 for x64-based SystemsMicrosoft · Windows ServerMicrosoft · Windows Server, version 1903 (Server Core installation)Microsoft · Windows Server, version 1909 (Server Core installation)Microsoft · Windows Server, version 2004 (Server Core installation)¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →