CVE-2020-1252

<p>A remote code execution vulnerability exists when Windows improperly handles objects in memory. To exploit the vulnerability an attacker would have to convince a user to run a specially crafted application.</p> <p>An attacker who successfully exploited this vulnerability could execute arbitrary code and take control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.</p> <p>The updates address the vulnerability by correcting how Windows handles objects in memory.</p>

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1252Patch, Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1252Patch, Vendor Advisory

Published

Sep 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12514Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and b…4.9
• CVE-2020-12515Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-12516Older firmware versions (FW1 up to FW10) of the WAGO PLC fam…7.5
• CVE-2020-12517On Phoenix Contact PLCnext Control Devices versions before 2…9
• CVE-2020-12518On Phoenix Contact PLCnext Control Devices versions before 2…5.5
• CVE-2020-12519On Phoenix Contact PLCnext Control Devices versions before 2…9.8
• CVE-2020-12520Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-12521On Phoenix Contact PLCnext Control Devices versions before 2…6.5
• CVE-2020-12522The reported vulnerability allows an attacker who has networ…9.8
• CVE-2020-12523On Phoenix Contact mGuard Devices versions before 8.8.3 LAN …9.1
• CVE-2020-12524Uncontrolled Resource Consumption can be exploited to cause …7.5
• CVE-2020-12525M&M Software fdtCONTAINER Component in versions below 3.5.20…7.8