---
cve: "CVE-2020-1457"
severity: "HIGH"
cvss: 7.8
epss: "20.5%"
vendor: "Microsoft"
kev: false
exploited: false
published: "2020-07-27 19:15:14"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-15T07:24:33+02:00"
---

# CVE-2020-1457

> 7.8 HIGH

## Beschreibung

A remote code execution vulnerability exists in the way that Microsoft Windows Codecs Library handles objects in memory, aka 'Microsoft Windows Codecs Library Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1425.

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Erforderlich | good |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Referenzen

- <https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1457>
- <https://www.zerodayinitiative.com/advisories/ZDI-20-1081/>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2020-1457) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_