CVE-2020-0760: High severity microsoft access 2010 vulnerability
Published Apr 15, 2020
·Updated
A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.
Affected Software
33 affected components
Microsoft Access=2010-sp2
Microsoft Access=2013-sp1
Microsoft Access=2016
Microsoft Excel=2010-sp2
Microsoft Excel=2013-sp1
Microsoft Excel=2016
Microsoft Office=2010-sp2
Microsoft Office=2013-sp1
Microsoft Office=2013-sp1
Microsoft Office=2016
Microsoft Office=2019
Microsoft Office 365 ProPlus
Microsoft Outlook=2010-sp2
Microsoft Outlook=2013-sp1
Microsoft Outlook=2013-sp1
Microsoft Outlook=2016
Microsoft PowerPoint=2010-sp2
Microsoft PowerPoint=2013-sp1
Microsoft PowerPoint=2013-sp1
Microsoft PowerPoint=2016
Microsoft Project=2010-sp2
Microsoft Project=2013-sp1
Microsoft Project=2016
Microsoft Publisher=2010-sp2
Microsoft Publisher=2013-sp1
Microsoft Publisher=2016
Microsoft Visio=2010-sp2
Microsoft Visio=2013-sp1
Microsoft Visio=2016
Microsoft Word=2010-sp2
Microsoft Word=2013-sp1
Microsoft Word=2013-sp1
Microsoft Word=2016
Remediation
Event History
Apr 15, 2020
CVE Published
via MITRE·03:12 PM
Data Sourced
via MITRE·03:12 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-0760?
CVE-2020-0760 is a remote code execution vulnerability in Microsoft Office that occurs when arbitrary type libraries are improperly loaded.
2
How does CVE-2020-0760 affect Microsoft Office?
CVE-2020-0760 affects various versions of Microsoft Office, including Access, Excel, Outlook, PowerPoint, Project, Publisher, Visio, and Word.
3
What is the severity level of CVE-2020-0760?
CVE-2020-0760 has a severity level of 8.8, which is considered high.
4
How can I fix CVE-2020-0760?
To fix CVE-2020-0760, it is recommended to install the security updates provided by Microsoft.
5
Where can I find more information about CVE-2020-0760?
You can find more information about CVE-2020-0760 on the Microsoft Security Guidance Advisory.