CVE-2020-16949

CVE-2020-16949 is a medium-severity vulnerability rated 4.7/10 on the CVSS scale. <p>A denial of service vulnerability exists in Microsoft Outlook software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against a system.</p> <p>Exploitation of the vulnerability requires that a specially crafted email be sent to a vulnerable Outlook server.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Outlook handles objects in memory.</p>. EPSS estimates a 2.75% chance of exploitation in the next 30 days.