CVE-2020-0901 Microsoft Excel Remote Code Execution Vulnerability

🗓️ 21 May 2020 22:52:44Reported by microsoftType

Microsoft Excel RCE vulnerability

Reporter	Title	Published	Views	Family All 24
Information Security Automation	Microsoft Patch Tuesday May 2020: comments from VM vendors, promising stuff for phishing, troubles with SharePoint and lulz with Visual Studio	13 May 202000:49	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Excel’s spreadsheet editor involves an operation where data is written beyond the buffer in memory, allowing an attacker to execute arbitrary code.	29 May 202000:00	–	bdu_fstec
Circl	CVE-2020-0901	22 May 202002:55	–	circl
CNVD	Microsoft Excel Buffer Overflow Vulnerability (CNVD-2020-41714)	13 May 202000:00	–	cnvd
CVE	CVE-2020-0901	21 May 202022:52	–	cve
Microsoft KB	Description of the security update for Excel 2016: May 12, 2020	12 May 202014:00	–	mskb
Microsoft KB	Description of the security update for Excel 2013: May 12, 2020	12 May 202014:00	–	mskb
Microsoft KB	Description of the security update for Excel 2010: May 12, 2020	12 May 202014:00	–	mskb
Kaspersky	KLA11774 Multiple vulnerabilities in Microsoft Office	12 May 202000:00	–	kaspersky
Tenable Nessus	Security Updates for Microsoft Office Products (May 2020) (macOS)	13 May 202000:00	–	nessus

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft 365 Apps for Enterprise",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.1",
        "lessThan": "https://aka.ms/OfficeSecurityReleases",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Excel 2010 Service Pack 2",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "13.0.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Excel 2013 Service Pack 1",
    "platforms": [
      "32-bit Systems",
      "ARM64-based Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "15.0.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Excel 2016",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office 2016 for Mac",
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office 2019",
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "19.0.0",
        "lessThan": "https://aka.ms/OfficeSecurityReleases",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office 2019 for Mac",
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2020-0901

19 Aug 2026 16:33Current

9.7High risk

Vulners AI Score9.7

EPSS0.04313