CVE-2020-17132

—

CVSS 3.1

9.1 critical

EPSS

90%p100

Published

Dec 10, 2020 (Dec 10, 2020)

Modified

Jun 17, 2026

Description

Microsoft Exchange Remote Code Execution Vulnerability

Vendors: microsoft
Products: exchange server
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (89.9%)

In the news4 stories

Microsoft Patches Just 58 CVEs in Light December Update

Infosecurity MagazineDec 9, 10:30 UTC · Dec 9, 2020Vulnerability CVE-2020-17132 CVE-2020-17142 CVE-2020-17117+8 CVEs

60

Microsoft December 2020 Patch Tuesday fixes 58 bugs, 9 are critical

Security AffairsDec 9, 08:50 UTC · Dec 9, 2020Vulnerability in the wildCVE-2020-17132 CVE-2020-17121 CVE-2020-17095+2 CVEs

60

Microsoft Releases Windows Update (Dec 2020) to Fix 58 Security Flaws

The Hacker NewsDec 9, 04:58 UTC · Dec 9, 2020Exploit / PoC in the wildCVE-2020-17132 CVE-2020-17118 CVE-2020-17121+4 CVEs

60

A light December 2020 Patch Tuesday for a no-stress end of the year

Help Net SecurityDec 8, 00:00 UTC · Dec 8, 2020Vulnerability in the wildCVE-2020-17132 CVE-2020-16875 CVE-2020-17095+2 CVEs

60