CVE-2020-1349

2020-07-1400:00:00

microsoft

www.cve.org

8 High

AI Score

Confidence

High

0.025 Low

EPSS

Percentile

90.1%

JSON

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka ‘Microsoft Outlook Remote Code Execution Vulnerability’.

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft 365 Apps for Enterprise for 32-bit Systems",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft 365 Apps for Enterprise for 64-bit Systems",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office",
    "versions": [
      {
        "version": "2019 for 32-bit editions",
        "status": "affected"
      },
      {
        "version": "2019 for 64-bit editions",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Outlook",
    "versions": [
      {
        "version": "2016 (32-bit edition)",
        "status": "affected"
      },
      {
        "version": "2016 (64-bit edition)",
        "status": "affected"
      },
      {
        "version": "2013 Service Pack 1 (32-bit editions)",
        "status": "affected"
      },
      {
        "version": "2013 Service Pack 1 (64-bit editions)",
        "status": "affected"
      },
      {
        "version": "2010 Service Pack 2 (32-bit editions)",
        "status": "affected"
      },
      {
        "version": "2010 Service Pack 2 (64-bit editions)",
        "status": "affected"
      },
      {
        "version": "2013 RT Service Pack 1",
        "status": "affected"
      }
    ]
  }
]