CVE-2020-1349

—

CVSS 3.1

7.8 high

EPSS

22%p98

Published

Jul 14, 2020 (Jul 14, 2020)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka 'Microsoft Outlook Remote Code Execution Vulnerability'.

Vendors: microsoft
Products: 365 apps, office, outlook
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (22.4%)

In the news2 stories

July 2020 Patch Tuesday: Microsoft plugs wormable Windows DNS Server RCE flaw

Help Net SecurityNov 14, 09:19 UTC · Nov 14, 2023Vulnerability in the wildCVE-2020-1350 CVE-2020-1147 CVE-2020-1349+2 CVEs

Microsoft July 2020 Security Updates address 123 vulnerabilities

Security AffairsJul 15, 09:16 UTC · Jul 15, 2020Vulnerability CVE-2020-1350 CVE-2020-1400 CVE-2020-1401+20 CVEs1