Is CVE-2020-27248 actively exploited?

No active exploitation of CVE-2020-27248 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2020-27248 be exploited remotely?

No. CVE-2020-27248 requires local access to exploit.

What is the CVSS score of CVE-2020-27248?

CVE-2020-27248 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2020-27248

HIGH

CVE-2020-27248

CWE-122Published: February 4, 2021· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. In version/Instance 0x0003 and 0x0014, an attacker can entice the victim to open a document to trigger this vulnerability. This affects SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 (Revision 1014).

NVD Source

Technical Analysis

CVE-2020-27248 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation does not require any privileges, though user interaction (Required) is needed, which slightly reduces the risk of mass automated attacks.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.