CVE-2020-1008

CVE-2020-1008 is a remote code execution vulnerability in the Windows Jet Database Engine, affecting multiple versions of Microsoft Windows and Windows Server. This flaw allows an attacker to execute arbitrary code due to improper handling of objects in memory. With a CVSS score of 7.8 (High), it requires user interaction (UI:R) and local access (AV:L), but can lead to high confidentiality, integrity, and availability impacts. Despite its high severity and a FAUCET Risk Score of 95/100, there is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog. Community discussion and media coverage are minimal, with only one article from BleepingComputer mentioning it as part of the April 2020 Patch Tuesday.