← Back

CVE-2020-1224

nvd nist
Published: Sep 11, 2020Modified: Feb 23, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD (Secondary)

Description

<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p> <p>To exploit the vulnerability, an attacker could craft a special document file and then convince the user to open it. An attacker must know the memory address location where the object was created.</p> <p>The update addresses the vulnerability by changing the way certain Excel functions handle objects in memory.</p>

Affected (11)

6 products
365 Apps
Excel
Office
Office Online Server
Office Web Apps
Sharepoint Enterprise Server
Configuration A
11 vulnerable
Vulnerable SoftwareAffected Versions
All versions
Microsoft
Version 2010 sp2
Version 2013 sp1
Version 2013 sp1
Version 2016
Microsoft
Version 2016
Version 2019
Version 2019
All versions
Version 2013 sp1
Version 2013 sp1

References (2)

Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.