CVE-2020-0688

High8.8Published on February 11, 2020

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.

Actively exploited

In the CISA exploited-vulnerabilities catalogue since Nov 3, 2021
US federal agencies must remediate it by May 3, 2022 (BOD 22-01)
First attack observed 27 days after disclosure
Used in ransomware campaigns

Apply updates per vendor instructions.

Source: CISA KEV · Jul 28, 2026 Mar 31, 2026 Mar 16, 2026 Mar 11, 2026 Mar 9, 2026 Mar 3, 2026

CVSS score8.8 / 10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness type (CWE)CWE-287, CWE-287

Vendorsmicrosoft

Affected products

Vendors	Product	Versions
microsoft	exchange server	2010

APT

NightEagle, Hacking Cat, and Toy Ghouls Target Russian Networks

Kaspersky reports NightEagle, Hacking Cat and Toy Ghouls targeting Russian firms with Exchange exploits, backdoors, ransomware and wipers.

Sep 16, 202619:437 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Actively exploited

Affected products

Related articles

NightEagle, Hacking Cat, and Toy Ghouls Target Russian Networks