CVEvulnerability
CVE-2020-1225
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-06-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-416
Description
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226.
Affected configurations
• microsoft 365 apps
• microsoft excel 2010
• microsoft excel 2013
• microsoft excel 2016
• microsoft office 2016
• microsoft office 2019
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1225 Patch, Vendor Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1045 Third Party Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1225 Patch, Vendor Advisory
- https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1045 Third Party Advisory