In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Jan 28, 2020 · NIST NVD

   Detected

   In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are unaffected.

2. Oct 14, 2026 · NIST NVD

   Updated

   In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are unaffected.

Affected

• cpe python/pythonversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2020-8315

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2020-8315

  30-day exploitation probability 1.5%

  first.org
• NIST NVDVulnerability recordCVE-2020-8315

  In Python (CPython) 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1, an insecure dependency load upon launch on Windows 7 may result in an attacker's copy of api-ms-win-core-path-l1-1-0.dll being loaded and used instead of the system's copy. Windows 8 and later are u

  nvd.nist.gov

References

• Issue Tracking · bugs.python.org
• Reference · cert-portal.siemens.com