EUVD-2020-8912

🗓️ 16 Oct 2020 22:18:04Reported by EUVDType

Remote code execution vulnerability in Microsoft Office allows attackers to run arbitrary code.

Reporter	Title	Published	Views	Family All 21
BDU FSTEC	The vulnerability of the Microsoft Office suite relates to errors in memory object handling, allowing an attacker to execute arbitrary code.	22 Oct 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft Office suite relates to errors in memory object handling, allowing an attacker to execute arbitrary code.	26 Nov 202000:00	–	bdu_fstec
CNVD	Microsoft Office Remote Code Execution Vulnerability (CNVD-2020-61035)	2 Nov 202000:00	–	cnvd
CVE	CVE-2020-16954	16 Oct 202022:18	–	cve
Cvelist	CVE-2020-16954 Microsoft Office Remote Code Execution Vulnerability	16 Oct 202022:18	–	cvelist
Microsoft KB	Description of the security update for Office 2016: October 13, 2020	13 Oct 202007:00	–	mskb
Microsoft KB	Description of the security update for Office 2013: October 13, 2020	13 Oct 202007:00	–	mskb
Microsoft KB	Description of the security update for Office 2010: October 13, 2020	13 Oct 202007:00	–	mskb
Kaspersky	KLA11976 Multiple vulnerabilites in Microsoft Office	13 Oct 202000:00	–	kaspersky
Microsoft CVE	Microsoft Office Remote Code Execution Vulnerability	13 Oct 202007:00	–	mscve

[
  {
    "enisaIdVendor": [
      {
        "id": "d53e3542-97b5-3046-a07a-a90786f2d3b7",
        "vendor": {
          "name": "Microsoft"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "098c1865-38eb-31ed-85f6-ac67113e9e2f",
        "product": {
          "name": "Microsoft Office 2010 Service Pack 2"
        },
        "product_version": "13.0.0.0 <publication"
      },
      {
        "id": "529ffb55-7e26-34db-b600-3e67ec84927c",
        "product": {
          "name": "Microsoft Office 2013 Service Pack 1"
        },
        "product_version": "15.0.0 <publication"
      },
      {
        "id": "a2647a31-21cd-35ba-82dc-0a20038700fa",
        "product": {
          "name": "Microsoft 365 Apps for Enterprise"
        },
        "product_version": "16.0.1 <https://aka.ms/OfficeSecurityReleases"
      },
      {
        "id": "b6e16262-c203-337c-818b-8d559cfc6a56",
        "product": {
          "name": "Microsoft Office 2016"
        },
        "product_version": "16.0.0 <publication"
      },
      {
        "id": "be54a37e-0fe4-3cc0-9309-499ee5914244",
        "product": {
          "name": "Microsoft Office 2019"
        },
        "product_version": "19.0.0 <https://aka.ms/OfficeSecurityReleases"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16954

04 Aug 2024 13:45Current

7.7High risk

Vulners AI Score7.7

CVSS 3.17.8

CVSS 26.8

EPSS0.13831