Skip to content
fr Sign in
4.7 Medium

CVE-2020-16949 A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle…

Description

<p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against a system.</p> <p>Exploitation of the vulnerability requires that a specially crafted email be sent to a vulnerable Outlook server.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Outlook handles objects in memory.</p>

Affected products and versions

Product Affected versions Fixed in
Microsoft Office 2019 19.0 19.0.0 → latest No fix stated
Microsoft 365 Apps for Enterprise 16.0 16.0.1 → latest No fix stated
Microsoft Outlook 2016 16.0 16.0.0.0 → latest No fix stated
Microsoft Outlook 2013 Service Pack 1 15.0 15.0.0.0 → latest No fix stated
Microsoft Outlook 2010 Service Pack 2 13.0 13.0.0.0 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Microsoft Office 2019

The 696 CVEs of Microsoft Office 2019 →
CVE-2026-62804 External control of file name or path in Microsoft Office Word allows an unauthorized attacker to execute code locally 7.8 High CVE-2026-85875 Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally 5.5 Medium CVE-2026-83949 Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally 5.5 Medium CVE-2026-83951 Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally 5.5 Medium
Track this CVE