CVE-2020-1236: 
vulnerability analysis and mitigation

A remote code execution vulnerability identified as CVE-2020-1236 affects the Windows Jet Database Engine. The vulnerability was discovered when it was found that the engine improperly handles objects in memory. This vulnerability was disclosed on June 9, 2020, and affects various versions of Microsoft Windows operating systems (CVE Details).

The vulnerability has been assigned a severity score of 9.0 CVSS with the vector (AV:N/AC:M/Au:N/C:C/I:C/A:C), indicating a critical severity level. This vulnerability is distinct from CVE-2020-1208 and specifically relates to memory handling issues in the Jet Database Engine (Rapid7).

If successfully exploited, this vulnerability could allow an attacker to execute remote code on the affected system, potentially gaining the same user rights as the current user. The vulnerability affects confidentiality, integrity, and availability of the system, as indicated by the CVSS scoring (Rapid7).

Microsoft has released security updates to address this vulnerability across multiple Windows versions including Windows 10 (versions 1507 through 2004), Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019. The fixes are available through various KB updates including KB4557957, KB4560960, KB4561602, KB4561608, KB4561616, KB4561621, KB4561649, KB4561673, and KB4561674 (Rapid7).