CVE-2020-1455

medium Microsoft
CVSS v3 Base Score
5.3
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
EPSS Score
0.8%
Exploitation probability in 30 days
Top 26% most likely to be exploited
Attack Characteristics
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Confidentiality
Low
Integrity
Low
Availability
Low
Published: August 17, 2020 (2096 days ago)
Last Modified: February 23, 2026
Vendor: Microsoft

Description

A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service. To exploit the vulnerability, an attacker would first require execution on the victim system. The security update addresses the vulnerability by ensuring Microsoft SQL Server Management Studio properly handles files.

CWE

NVD-CWE-noinfo

Affected Products

microsoft sql server management studio

References

🔗 portal.msrc.microsoft.com 🔗 portal.msrc.microsoft.com