CVE-2020-0892

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855.

Published: Mar 12, 2020
Updated: Apr 13, 2023
CVE: CVE-2020-0892
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.8
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
microsoft / word	2013-sp1	2013-sp1.x
microsoft / word	2016	2016.x
microsoft / sharepoint_foundation	2013-sp1	2013-sp1.x
microsoft / office_web_apps	2010-sp2	2010-sp2.x
microsoft / sharepoint_server	2010-sp2	2010-sp2.x
microsoft / office	2010-sp2	2010-sp2.x
microsoft / sharepoint_enterprise_server	2016	2016.x
microsoft / word	2010-sp2	2010-sp2.x
microsoft / sharepoint_enterprise_server	2013-sp1	2013-sp1.x
microsoft / office	2016	2016.x
microsoft / office	2019	2019.x
microsoft / sharepoint_server	2019	2019.x
microsoft / office_online_server	1.0	1.0.x

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0892

Vulnerability Database

289,599

CVE-2020-0892