CVE-2024-20670

—

CVSS 3.1

8.1 high

EPSS

2%p82

Published

Apr 9, 2024 (Apr 9, 2024)

Modified

Jun 17, 2026

Description

Outlook for Windows Spoofing Vulnerability

Vendors: microsoft
Products: outlook
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (2.3%)

In the news2 stories

April’s Patch Tuesday Brings Record Number of Fixes

Krebs on SecurityApr 9, 20:55 UTC · Apr 9, 2024Vulnerability in the wildCVE-2024-20670 CVE-2024-29063 CVE-2024-29988+2 CVEs1

60

Microsoft patches two actively exploited zero-days (CVE-2024-29988, CVE-2024-26234)

Help Net SecurityApr 9, 00:00 UTC · Apr 9, 2024Exploit / PoC in the wildCVE-2024-29988 CVE-2024-26234 CVE-2024-21412+9 CVEs

60