Microsoft Office ElementType code execution vulnerability

🗓️ 08 Dec 2020 00:00:00Reported by Talos IntelligenceType

Microsoft Office Excel use-after-free vulnerability in version 2002 build 12527.20988 can lead to remote code execution using a crafted XLS file

Reporter	Title	Published	Views	Family All 31
Information Security Automation	Vulristics Vulnerability Score, Automated Data Collection and Microsoft Patch Tuesdays Q4 2020	11 Jan 202101:50	–	avleonov
BDU FSTEC	The vulnerability of Microsoft Excel spreadsheet editors, Microsoft Office Web Apps, Microsoft 365 Apps, Microsoft Office, and Office Online Server is related to code errors, allowing attackers to execute arbitrary code.	30 Dec 202000:00	–	bdu_fstec
CNNVD	Microsoft Excel 资源管理错误漏洞	8 Dec 202000:00	–	cnnvd
CNVD	Microsoft Excel Remote Code Execution Vulnerability (CNVD-2021-39508)	10 Dec 202000:00	–	cnvd
CVE	CVE-2020-17123	9 Dec 202023:36	–	cve
Cvelist	CVE-2020-17123 Microsoft Excel Remote Code Execution Vulnerability	9 Dec 202023:36	–	cvelist
EUVD	EUVD-2020-9078	7 Oct 202500:30	–	euvd
Microsoft KB	Description of the security update for Office Online Server: December 8, 2020	8 Dec 202008:00	–	mskb
Microsoft KB	Description of the security update for Excel 2016: December 8, 2020	8 Dec 202008:00	–	mskb
Microsoft KB	Description of the security update for Office Web Apps Server 2013: December 8, 2020	8 Dec 202008:00	–	mskb

08 Dec 2020 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 3.17.8

CVSS 29.3

EPSS0.12342