CVE-2020-0651: Critical severity microsoft office excel vulnerability

Published Jan 14, 2020

Updated

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0650, CVE-2020-0653.

Affected Software

8 affected components

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Excel Macos=2016

Microsoft Excel=2019

Microsoft Excel Macos=2019

Microsoft Office 365 ProPlus

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0651

Event History

Jan 14, 2020

CVE Published

via MITRE·11:11 PM

Data Sourced

via MITRE·11:11 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-0651?

CVE-2020-0651 refers to a remote code execution vulnerability in Microsoft Excel software.

What is the severity of CVE-2020-0651?

CVE-2020-0651 has a severity rating of 7.8 (Critical).

Which software versions are affected by CVE-2020-0651?

Microsoft Excel versions 2010 SP2, 2013 SP1, 2016, 2019, and Microsoft Office 365 Proplus are affected by CVE-2020-0651.

How does CVE-2020-0651 occur?

CVE-2020-0651 occurs when Microsoft Excel software fails to properly handle objects in memory.

Is there a solution for CVE-2020-0651?

Yes, Microsoft has released security updates to address the CVE-2020-0651 vulnerability. It is recommended to apply the latest updates provided by Microsoft.