{
  "cveId": "CVE-2020-1229",
  "url": "https://patchblox.com/security/cve/CVE-2020-1229",
  "summary": "CVE-2020-1229 is fixed in 14 products on 1 platform, first by KB4484378, released June 9, 2020. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Microsoft Outlook Security Feature Bypass Vulnerability",
  "description": "\u003Cp\u003EA security feature bypass vulnerability exists in Microsoft Outlook when Office fails to enforce security settings configured on a system. An attacker who successfully exploited this vulnerability could cause a system to load remote images. These images could disclose the IP address of the targeted system to the attacker.\u003C/p\u003E\n\u003Cp\u003EExploitation of the vulnerability requires that a user open a specially crafted image with an affected version of Microsoft Office software. In an email attack scenario, an attacker could exploit the vulnerability by sending the specially crafted image to the user.\u003C/p\u003E\n\u003Cp\u003EThe update addresses the vulnerability by changing how remote images are processed in Outlook.\u003C/p\u003E",
  "published": "2020-06-09T12:00:00Z",
  "severity": "Important",
  "epss": 0.03923,
  "epssPercentile": 0.90409,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Less Likely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1229",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2010 Service Pack 2 (32-bit editions)",
      "fixedVersion": "",
      "fix": "KB4484378",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484378",
      "released": "2020-06-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2010 Service Pack 2 (32-bit editions)",
      "fixedVersion": "",
      "fix": "KB4484373",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484373",
      "released": "2020-06-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2010 Service Pack 2 (64-bit editions)",
      "fixedVersion": "",
      "fix": "KB4484378",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484378",
      "released": "2020-06-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2010 Service Pack 2 (64-bit editions)",
      "fixedVersion": "",
      "fix": "KB4484373",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484373",
      "released": "2020-06-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2013 RT Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4484351",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484351",
      "released": "2020-06-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2013 Service Pack 1 (32-bit editions)",
      "fixedVersion": "",
      "fix": "KB4484351",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484351",
      "released": "2020-06-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2013 Service Pack 1 (64-bit editions)",
      "fixedVersion": "",
      "fix": "KB4484351",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484351",
      "released": "2020-06-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2016 (32-bit edition)",
      "fixedVersion": "",
      "fix": "KB4484342",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484342",
      "released": "2020-06-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Office 2016 (64-bit edition)",
      "fixedVersion": "",
      "fix": "KB4484342",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484342",
      "released": "2020-06-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Word 2010 Service Pack 2 (32-bit editions)",
      "fixedVersion": "",
      "fix": "KB4484380",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484380",
      "released": "2020-06-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Word 2010 Service Pack 2 (64-bit editions)",
      "fixedVersion": "",
      "fix": "KB4484380",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484380",
      "released": "2020-06-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Word 2013 RT Service Pack 1",
      "fixedVersion": "",
      "fix": "KB4484361",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484361",
      "released": "2020-06-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Word 2013 Service Pack 1 (32-bit editions)",
      "fixedVersion": "",
      "fix": "KB4484361",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484361",
      "released": "2020-06-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Word 2013 Service Pack 1 (64-bit editions)",
      "fixedVersion": "",
      "fix": "KB4484361",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484361",
      "released": "2020-06-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Word 2016 (32-bit edition)",
      "fixedVersion": "",
      "fix": "KB4484396",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484396",
      "released": "2020-06-09T12:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Word 2016 (64-bit edition)",
      "fixedVersion": "",
      "fix": "KB4484396",
      "url": "https://patchblox.com/security/fix/microsoft/kb4484396",
      "released": "2020-06-09T12:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}