AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-1478

HIGH · CVSS 7.8 EPSS 2.68% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-08-17 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.8. It affects Windows. Public exploit code or proof-of-concept references have been detected in its references.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2020-1478
Severity
HIGH
CVSS
7.8
EPSS
2.68%
Windows

Original NVD Description

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory. An attacker who successfully exploited the vulnerability could install programs; view, change, or delete data; or create new accounts with full user rights. There are multiple ways an attacker could exploit the vulnerability, such as by convincing a user to open a specially crafted document, or by convincing a user to visit a malicious webpage. The security update addresses the vulnerability by correcting how Windows Media Foundation handles objects in memory.

Related CVEs

Other vulnerabilities affecting the same vendor(s)