CVE-2020-1028: Critical severity windows 10 vulnerability

Published May 21, 2020

Updated

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-1126, CVE-2020-1136, CVE-2020-1150.

Affected Software

11 affected components

Microsoft Windows 10=1607

Microsoft Windows 10=1709

Microsoft Windows 10=1803

Microsoft Windows 10=1809

Microsoft Windows 10=1903

Microsoft Windows 10=1909

Microsoft Windows Server 2016

Microsoft Windows Server 2016=1803

Microsoft Windows Server 2016=1903

Microsoft Windows Server 2016=1909

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1028

Event History

May 21, 2020

CVE Published

via MITRE·10:52 PM

Data Sourced

via MITRE·10:52 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-1028?

CVE-2020-1028 has a severity rating of important according to Microsoft’s security guidelines.

How do I fix CVE-2020-1028?

To fix CVE-2020-1028, install the security updates released by Microsoft for affected Windows versions.

What versions of Windows are affected by CVE-2020-1028?

CVE-2020-1028 affects various versions of Windows 10, Windows Server 2016, and Windows Server 2019.

What is the impact of CVE-2020-1028?

The impact of CVE-2020-1028 can lead to memory corruption which may allow an attacker to execute arbitrary code.

Is there a workaround for CVE-2020-1028?

There are currently no known workarounds for CVE-2020-1028, and applying the latest patches is recommended.