Search threats, CVEs… ⌘K
← Back to CVE intelligence
CVE intelligenceCISA KEVRansomware use

CVE-2020-0688

Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability

Published Feb 11, 2020Sources checked Sep 12, 2026
8.8HIGHCVSS out of 10
What this means

Actively exploited

CISA lists CVE-2020-0688 in its Known Exploited Vulnerabilities catalog, which means exploitation has been observed. The entry applies to Microsoft Exchange Server.

  • Apply updates per vendor instructions.
CISA KEVListedObserved exploitation
EPSS100.0%Estimated 30-day exploitation probability
Ransomware useReported by CISACISA KEV ransomware field
Threat actors2Source-linked actor relationships
Overview

What is CVE-2020-0688?

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.