← Back to CVE List
Vulnerability Intelligence Report

CVE-2020-0892

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855.

No Active Exploit Signals
CVSS Base Score
7.8
HIGH
EPSS Probability:11.55%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
Authentication
Weaponization
SSVC Action

Affected Products & Versions

Vendor Product Affected Versions
Microsoft Microsoft SharePoint Foundation 2013 Service Pack 1 (affected)
Microsoft Microsoft SharePoint Enterprise Server 2016 (affected), 2013 Service Pack 1 (affected)
Microsoft Microsoft SharePoint Server 2019 (affected), 2010 Service Pack 2 (affected)
Microsoft Microsoft Office 2019 for 32-bit editions (affected), 2019 for 64-bit editions (affected), 2019 for Mac (affected), 2016 for Mac (affected), 2010 Service Pack 2 (32-bit editions) (affected), 2010 Service Pack 2 (64-bit editions) (affected)
Microsoft Office 365 ProPlus 32-bit Systems (affected), 64-bit Systems (affected)
Microsoft Microsoft Office Online Server unspecified (affected)
Microsoft Microsoft Word 2016 (32-bit edition) (affected), 2016 (64-bit edition) (affected), 2010 Service Pack 2 (32-bit editions) (affected), 2010 Service Pack 2 (64-bit editions) (affected), 2013 RT Service Pack 1 (affected), 2013 Service Pack 1 (32-bit editions) (affected), 2013 Service Pack 1 (64-bit editions) (affected)
Microsoft Microsoft Office Web Apps 2010 Service Pack 2 (affected)

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

EPSS Score
11.548%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityMicrosoft Corporation · Vendor · USA
Reserved2019-11-04T00:00:00
Published2020-03-12T15:48:55
Last Updated2024-08-04T06:18:03

LINK COPIED TO CLIPBOARD