CVE-2018-0920: Critical severity microsoft office excel vulnerability

Published Apr 12, 2018

Updated

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel. This CVE ID is unique from CVE-2018-1011, CVE-2018-1027, CVE-2018-1029.

Affected Software

1 affected component

Microsoft Excel=2010-sp2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0920

Event History

Apr 12, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0920?

CVE-2018-0920 is rated as critical due to its potential for remote code execution.

How do I fix CVE-2018-0920?

To fix CVE-2018-0920, you should apply the latest security updates provided by Microsoft for Excel.

Which versions of Microsoft Excel are affected by CVE-2018-0920?

CVE-2018-0920 specifically affects Microsoft Excel 2010 SP2.

What kind of attacks can exploit CVE-2018-0920?

CVE-2018-0920 can be exploited through maliciously crafted Excel files that can execute arbitrary code.

Is there a workaround for CVE-2018-0920 if I cannot update?

A potential workaround for CVE-2018-0920 includes disabling macros in Excel, but this is not a complete solution.