CVE-2020-0688

Microsoft Exchange has a vulnerability that allows attackers to run malicious code remotely on the server. This happens because the software doesn't properly manage data in memory, potentially giving unauthorized users full control of the email system.

A memory corruption vulnerability in Microsoft Exchange allows remote code execution when the application fails to properly validate or sanitize objects in memory. An authenticated attacker can exploit this to achieve arbitrary code execution with the privileges of the Exchange process, leading to complete compromise of the mail server.