Skip to content
CVE Tracker
Back

CVE-2020-0807

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory…

High8.8EPSS 5.6%
Published
Updated
Reserved
Assigned by
microsoft

Description

A memory corruption vulnerability exists when Windows Media Foundation improperly handles objects in memory, aka 'Media Foundation Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0801, CVE-2020-0809, CVE-2020-0869.

Scores

CVSS scores of CVE-2020-0807, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.1High8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
5.6% · top 7.1% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.8.

Weakness

Affected products

  • Microsoft · Windows

    • affected 10 Version 1803 for 32-bit Systems
    • affected 10 Version 1803 for x64-based Systems
    • affected 10 Version 1803 for ARM64-based Systems
    • affected 10 Version 1809 for 32-bit Systems
    • affected 10 Version 1809 for x64-based Systems
    • affected 10 Version 1809 for ARM64-based Systems

  • Microsoft · Windows Server

    • affected version 1803 (Core Installation)
    • affected 2019
    • affected 2019 (Core installation)

  • Microsoft · Windows 10 Version 1909 for 32-bit Systems

    • affected unspecified

  • Microsoft · Windows 10 Version 1909 for x64-based Systems

    • affected unspecified

  • Microsoft · Windows 10 Version 1909 for ARM64-based Systems

    • affected unspecified

  • Microsoft · Windows Server, version 1909 (Server Core installation)

    • affected unspecified

  • Microsoft · Windows 10 Version 1903 for 32-bit Systems

    • affected unspecified

  • Microsoft · Windows 10 Version 1903 for x64-based Systems

    • affected unspecified

  • Microsoft · Windows 10 Version 1903 for ARM64-based Systems

    • affected unspecified

  • Microsoft · Windows Server, version 1903 (Server Core installation)

    • affected unspecified

References (1)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .