UpHeron
All vulnerabilities

Servers and applications

CVE-2020-8315

In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are unaffected.

Severity
Medium 5.5
Published
28 Jan 2020
Last changed
14 Oct 2026
Added to UpHeron
21 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
PythonServers and applications · cpe:a:python:python
  • From 3.6.0 up to 3.6.10
  • From 3.7.0 up to 3.7.6
  • From 3.8.0 up to 3.8.1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-8315
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-8315