CVE-2020-0948: Critical severity windows 10 vulnerability

Published Apr 15, 2020

Updated

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0949, CVE-2020-0950.

Affected Software

12 affected components

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows 10=1903

Microsoft Windows 10=1909

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1803

Microsoft Windows Server 2016=1903

Microsoft Windows Server 2016=1909

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0948

Event History

Apr 15, 2020

CVE Published

via MITRE·03:12 PM

Data Sourced

via MITRE·03:12 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-0948?

CVE-2020-0948 is rated as critical due to its potential for memory corruption leading to remote code execution.

How do I fix CVE-2020-0948?

To fix CVE-2020-0948, ensure that you install the latest security updates from Microsoft for affected Windows versions.

What systems are affected by CVE-2020-0948?

CVE-2020-0948 affects multiple versions of Microsoft Windows 10, Windows Server 2016, and Windows Server 2019.

What can happen if CVE-2020-0948 is exploited?

Exploitation of CVE-2020-0948 can allow an attacker to run arbitrary code on the affected system, potentially taking full control.

Is there a workaround for CVE-2020-0948?

There are no official workarounds for CVE-2020-0948; updating your system is the recommended action to mitigate the risk.