CVEvulnerability

CVE-2020-1446

8.8 HIGH Published 2020-07-14 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P

Description

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448.

Affected configurations

• microsoft 365 apps • microsoft office 2010 • microsoft office 2016 • microsoft office 2019 • microsoft office online server 1.0 • microsoft office web apps 2010 • microsoft office web apps 2013 • microsoft sharepoint enterprise server 2013 • microsoft sharepoint enterprise server 2016 • microsoft sharepoint server 2010 • microsoft sharepoint server 2019 • microsoft word 2010 • microsoft word 2013 • microsoft word 2016 • microsoft word rt 2013

References