← Back

CVE-2020-0760

nvd nist
Published: Apr 15, 2020Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.

Affected (33)

Microsoft
10 products
Access
Excel
Office
Office 365 Proplus
Outlook
Powerpoint
Project
Publisher
Visio
Word
Configuration A
33 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Access
Version 2010 sp2
Access
Version 2013 sp1
Access
Version 2016
Microsoft
Excel
Version 2010 sp2
Excel
Version 2013 sp1
Excel
Version 2016
Microsoft
Office
Version 2010 sp2
Office
Version 2013 sp1
Office
Version 2013 sp1
Office
Version 2016
Office
Version 2019
Office 365 Proplus
All versions
Microsoft
Outlook
Version 2010 sp2
Outlook
Version 2013 sp1
Outlook
Version 2013 sp1
Outlook
Version 2016
Microsoft
Powerpoint
Version 2010 sp2
Powerpoint
Version 2013 sp1
Powerpoint
Version 2013 sp1
Powerpoint
Version 2016
Microsoft
Project
Version 2010 sp2
Project
Version 2013 sp1
Project
Version 2016
Microsoft
Publisher
Version 2010 sp2
Publisher
Version 2013 sp1
Publisher
Version 2016
Microsoft
Visio
Version 2010 sp2
Visio
Version 2013 sp1
Visio
Version 2016
Microsoft
Word
Version 2010 sp2
Word
Version 2013 sp1
Word
Version 2013 sp1
Word
Version 2016

References (2)

Source: secure@microsoft.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.