CVE-2020-0950: Critical severity windows 10 vulnerability

Published Apr 15, 2020

Updated

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0948, CVE-2020-0949.

Affected Software

12 affected components

Microsoft Windows 10

Microsoft Windows 10=1607

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows 10=1903

Microsoft Windows 10=1909

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1803

Microsoft Windows Server 2016=1903

Microsoft Windows Server 2016=1909

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0950

Event History

Apr 15, 2020

CVE Published

via MITRE·03:13 PM

Data Sourced

via MITRE·03:13 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-0950?

CVE-2020-0950 has a severity rating of critical as it allows for memory corruption in Windows Media Foundation.

How do I fix CVE-2020-0950?

To fix CVE-2020-0950, users should install the latest security updates from Microsoft for affected versions of Windows.

What versions of Windows are affected by CVE-2020-0950?

CVE-2020-0950 affects various versions of Windows 10 and Windows Server 2016 and 2019.

What type of attacks can exploit CVE-2020-0950?

CVE-2020-0950 can be exploited by attackers to execute arbitrary code on the affected system through malicious media files.

Is there a workaround for CVE-2020-0950 until a fix is applied?

Currently, there is no known workaround for CVE-2020-0950, and it is recommended to apply the security updates promptly.