title: Microsoft Windows Codecs Library Remote Code Execution Vulnerability
description: <p>A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code.</p>
<p>Exploitation of the vulnerability requires that a program process a specially crafted image file.</p>
<p>The update addresses the vulnerability by correcting how Microsoft Windows Codecs Library handles objects in memory.</p>
problem types: Remote Code Execution
affected:
{
vendor: Microsoft
product: Windows 10 Version 1803
platforms: [32-bit Systems, x64-based Systems, ARM64-based Systems]
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows 10 Version 1809
platforms: [32-bit Systems, x64-based Systems, ARM64-based Systems]
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows 10 Version 1909
platforms: [x64-based Systems, ARM64-based Systems]
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows 10 Version 1709 for 32-bit Systems
platforms: 32-bit Systems
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows 10 Version 1709
platforms: [x64-based Systems, ARM64-based Systems]
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
platforms: Unknown
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
platforms: Unknown
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
platforms: Unknown
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows 10 Version 2004
platforms: [32-bit Systems, ARM64-based Systems, x64-based Systems]
versions:
version: N/A, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
]