CVE-2017-0020

🗓️ 17 Mar 2017 00:00:00Reported by microsoftType

Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document

Reporter	Title	Published	Views	Family All 26
Information Security Automation	Downloading and analyzing NVD CVE feed	2 Oct 201723:27	–	avleonov
CNVD	Microsoft Office Memory Corruption Vulnerability (CNVD-2017-03531)	16 Mar 201700:00	–	cnvd
Check Point Advisories	Microsoft Office Memory Corruption (MS17-014: CVE-2017-0020)	14 Mar 201700:00	–	checkpoint_advisories
Cvelist	CVE-2017-0020	17 Mar 201700:00	–	cvelist
Microsoft KB	MS17-014: Description of the security update for Office Web Apps Server 2013: March 14, 2017	14 Mar 201707:00	–	mskb
Microsoft KB	MS17-014: Description of the security update for Excel 2013: March 14, 2017	14 Mar 201707:00	–	mskb
Microsoft KB	MS17-014: Description of the security update for Excel 2016: March 14, 2017	14 Mar 201707:00	–	mskb
Microsoft KB	MS17-014: Description of the security update for Excel 2010: March 14, 2017	14 Mar 201707:00	–	mskb
Microsoft KB	MS17-014: Security Update for Microsoft Office: March 14, 2017	14 Mar 201700:00	–	mskb
Kaspersky	KLA10981 Multiple vulnerabilities in Microsoft Office	14 Mar 201700:00	–	kaspersky

NVD

Node

microsoft excelMatch2010sp2

microsoft excelMatch2013sp1rt

microsoft excelMatch2016

microsoft office_web_appsMatch2013sp1

[
  {
    "product": "Office",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1038010
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0020
securityfocus	www.securityfocus.com/bid/96050

13 May 2026 00:24Current

6.7Medium risk

Vulners AI Score6.7

CVSS 37.8

CVSS 29.3

EPSS0.21743

CWE-119