Description of the security update for Excel 2016: December 8, 2020

🗓️ 08 Dec 2020 08:00:00Reported by MicrosoftType

This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. It also adds security enhancements for VBA projects. To apply this security update, you must have the release version of Excel 2016 installed on the computer

Reporter	Title	Published	Views	Family All 98
Information Security Automation	Vulristics Vulnerability Score, Automated Data Collection and Microsoft Patch Tuesdays Q4 2020	11 Jan 202101:50	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Excel spreadsheet editors and the Microsoft 365 Apps for Enterprise suite, related to access control deficiencies, allows attackers to bypass existing security measures.	25 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office software packages, Microsoft Office Web Apps, Microsoft Office Online Server, and Microsoft 365 Apps for Enterprises, related to buffer overflow vulnerabilities, allows attackers to access protected information.	28 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel, Microsoft Office programs, Microsoft Office Web Apps, Microsoft Office Online Server, and Microsoft 365 Apps for Enterprise lies in the fact that it allows code to execute outside of the buffer, enabling an attacker to execute arbitrary code.	30 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel, Microsoft Office programs, Microsoft Office Web Apps, Microsoft Office Online Server, and Microsoft 365 Apps for Enterprise lies in the fact that it allows code to execute outside of the buffer, enabling an attacker to execute arbitrary code.	30 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office programs, Microsoft Office Web Apps, and Microsoft 365 Apps for Enterprises relates to the use of exploits after release. This allows attackers to gain access to protected information, execute arbitrary code, or cause a service failure.	30 Dec 202000:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office Web Apps, Microsoft 365 Apps, Microsoft Office, and Office Online Server is related to code errors, allowing attackers to execute arbitrary code.	30 Dec 202000:00	–	bdu_fstec
Circl	CVE-2020-17126	10 Dec 202002:33	–	circl
Circl	CVE-2020-17128	10 Dec 202019:13	–	circl
Circl	CVE-2020-17130	10 Dec 202002:33	–	circl

08 Dec 2020 08:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.17.8

CVSS 29.3

EPSS0.03568

SSVC