CVE-2020-1174: 
vulnerability analysis and mitigation

A remote code execution vulnerability (CVE-2020-1174) exists in the Windows Jet Database Engine when it improperly handles objects in memory. This vulnerability was disclosed in May 2020 and affects various versions of Microsoft Windows. The vulnerability is unique from similar issues tracked as CVE-2020-1051, CVE-2020-1175, and CVE-2020-1176 (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a base score of 9.3 (HIGH) with the vector (AV:N/AC:M/Au:N/C:C/I:C/A:C) (NVD).

If successfully exploited, this vulnerability could allow an attacker to execute arbitrary code on the affected system with the privileges of the current user. The vulnerability affects the confidentiality, integrity, and availability of the system, as indicated by the high impact scores across all three categories in the CVSS metrics (NVD).

The vulnerability requires user interaction and local access to be exploited, as indicated by the CVSS metrics (UI:R and AV:L). While the attack complexity is considered low, successful exploitation depends on convincing a user to open a specially crafted file or interact with malicious content (NVD).

Microsoft has released security updates to address this vulnerability. Users should apply the appropriate patches through Windows Update or download and install them manually from the Microsoft Security Update Guide (Microsoft Advisory).