CVE-2020-1493

🗓️ 25 Aug 2026 04:14:19Reported by KitPloitType

kitploit🔗 kitploit.com👁 1 Views

Zero-click RCE in Outlook 2019 16.0.12624.20424 via out-of-bounds read in MS-TNEF parsing.

Reporter	Title	Published	Views	Family All 24
Information Security Automation	Microsoft Patch Tuesday August 2020: vulnerabilities with Detected Exploitation, useful for phishing and others	30 Aug 202022:13	–	avleonov
BDU FSTEC	The vulnerability of the Microsoft Outlook email client arises from an operation that occurs outside the buffer in memory, allowing an attacker to disclose protected information.	9 Sep 202000:00	–	bdu_fstec
Circl	CVE-2020-1493	30 Aug 202013:15	–	circl
CNVD	Microsoft Outlook Information Disclosure Vulnerability (CNVD-2020-50144)	2 Sep 202000:00	–	cnvd
CVE	CVE-2020-1493	17 Aug 202000:00	–	cve
Cvelist	CVE-2020-1493 Microsoft Outlook Information Disclosure Vulnerability	17 Aug 202000:00	–	cvelist
GithubExploit	Exploit for Insecure Storage of Sensitive Information in Microsoft	25 Aug 202005:25	–	githubexploit
Microsoft KB	Description of the security update for Outlook 2016: August 11, 2020	11 Aug 202007:00	–	mskb
Microsoft KB	Description of the security update for Outlook 2013: August 11, 2020	11 Aug 202007:00	–	mskb
Microsoft KB	Description of the security update for Outlook 2010: August 11, 2020	11 Aug 202007:00	–	mskb

25 Aug 2026 04:14Current

6.2Medium risk

Vulners AI Score6.2

CVSS 24.3

CVSS 3.15.5

EPSS0.07296

SSVC

Outlook 2019 zero-click remote code execution out-of-bounds read MS-TNEF parsing