CVE-2020-0850: High severity microsoft office vulnerability

Published Mar 12, 2020

Updated

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0851, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892.

Affected Software

12 affected components

Microsoft Office=2016

Microsoft Office=2019

Microsoft Office 365 ProPlus

Microsoft Office Online Server=1.0

Microsoft SharePoint Enterprise Server=2013-sp1

Microsoft SharePoint Enterprise Server=2016

Microsoft SharePoint Foundation=2013-sp1

Microsoft SharePoint Server=2019

Microsoft Word=2013-sp1

Microsoft Word=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0850

Event History

Mar 12, 2020

CVE Published

via MITRE·03:48 PM

Data Sourced

via MITRE·03:48 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-0850?

CVE-2020-0850 is a remote code execution vulnerability in Microsoft Word software.

What is the severity of CVE-2020-0850?

The severity of CVE-2020-0850 is high, with a CVSS score of 8.8.

Which versions of Microsoft Office are affected by CVE-2020-0850?

Microsoft Office 2016, Microsoft Office 2019, and Microsoft Office 365 Proplus are affected by CVE-2020-0850.

How does CVE-2020-0850 exploit the vulnerability?

CVE-2020-0850 exploits the vulnerability by improperly handling objects in memory in Microsoft Word.

Is there a fix available for CVE-2020-0850?

Yes, Microsoft has released a security advisory with guidance on how to mitigate the vulnerability. Please refer to the Microsoft Security Guidance advisory for more information.