Rapid7’s 2026 Global Cybersecurity Summit is now available on-demand.Watch sessions.
Rapid7

vulnerability

Microsoft Windows: CVE-2020-16968: Windows Camera Codec Pack Remote Code Execution Vulnerability

Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Oct 13, 2020
Added
Oct 13, 2020
Modified
Sep 3, 2025

Description

A remote code execution vulnerability exists when the Windows Camera Codec Pack improperly handles objects in memory, aka 'Windows Camera Codec Pack Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-16967.

Solutions

microsoft-windows-windows_10-1507-kb4580327microsoft-windows-windows_10-1607-kb4580346microsoft-windows-windows_10-1709-kb4580328microsoft-windows-windows_10-1803-kb4580330microsoft-windows-windows_10-1809-kb4577668microsoft-windows-windows_10-1903-kb4577671microsoft-windows-windows_10-1909-kb4577671microsoft-windows-windows_10-2004-kb4579311msft-kb4577671-c42dc613-fb5b-4c45-925c-4f508584a635msft-kb4577671-ddbf4c81-6ca7-4986-999e-9275ef508017msft-kb4579311-e9f0550d-b150-4eeb-bf5e-1a08b117e7af
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.