CVE-2020-0696: Microsoft Office

Medium severity, CVSS 6.5. EPSS: 5% chance of exploitation in the next 30 days.

A security feature bypass vulnerability exists in Microsoft Outlook software when it improperly handles the parsing of URI formats, aka 'Microsoft Outlook Security Feature Bypass Vulnerability'.

Affected products

• Microsoft Office: version 2019 only
• Microsoft Office 365 Proplus: affected versions not specified
• Microsoft Outlook: version 2010 only; version 2013 only; version 2016 only

Published 2020-02-11. Last modified 2026-06-17.