CVE-2020-0650: Critical severity microsoft office excel vulnerability

Published Jan 14, 2020

Updated

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0651, CVE-2020-0653.

Affected Software

8 affected components

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Excel Macos=2016

Microsoft Excel=2019

Microsoft Excel Macos=2019

Microsoft Office 365 ProPlus

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0650

Event History

Jan 14, 2020

CVE Published

via MITRE·11:11 PM

Data Sourced

via MITRE·11:11 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-0650?

CVE-2020-0650 is a remote code execution vulnerability in Microsoft Excel software.

What is the severity of CVE-2020-0650?

CVE-2020-0650 has a severity rating of 7.8, which is classified as critical.

Which versions of Excel are affected by CVE-2020-0650?

Excel 2010 SP2, Excel 2013 SP1, Excel 2016, Excel 2019, and Office 365 Proplus are affected by CVE-2020-0650.

What is the recommended solution for CVE-2020-0650?

Apply the latest security updates from Microsoft to patch the vulnerability.

Where can I find more information about CVE-2020-0650?

You can find more information about CVE-2020-0650 on the Microsoft Security Guidance advisory page: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0650