VULNERABILITY INTELLIGENCE

CVE-2020-14107

CVSS score7.5 HIGH

EPSS probability11.54%

CISA KEVNot currently listed

Published2022-01-18

Last modified2026-06-17

Description

A remote code execution vulnerability exists when Windows Address Book (WAB) improperly processes vcard files.To exploit the vulnerability, an attacker could send a malicious vcard that a victim opens using Windows Address Book (WAB), aka 'Windows Address Book Remote Code Execution Vulnerability'.