CVE-2020-0892: Critical severity microsoft office vulnerability

Published Mar 12, 2020

Updated

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855.

Affected Software

16 affected components

Microsoft Office=2010-sp2

Microsoft Office Mac Os=2016

Microsoft Office=2019

Microsoft Office Macos=2019

Microsoft Office 365 ProPlus

Microsoft Office Online Server=1.0

Microsoft Office Web Apps=2010-sp2

Microsoft SharePoint Enterprise Server=2013-sp1

Microsoft SharePoint Enterprise Server=2016

Microsoft SharePoint Foundation=2013-sp1

Microsoft SharePoint Server=2010-sp2

Microsoft SharePoint Server=2019

Microsoft Word=2010-sp2

Microsoft Word=2013-sp1

Microsoft Word=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0892

Event History

Mar 12, 2020

CVE Published

via MITRE·03:48 PM

Data Sourced

via MITRE·03:48 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-0892?

CVE-2020-0892 is a remote code execution vulnerability in Microsoft Word software.

What is the severity of CVE-2020-0892?

CVE-2020-0892 has a severity rating of 7.8 (critical).

Which software versions are affected by CVE-2020-0892?

CVE-2020-0892 affects various versions of Microsoft Office, Microsoft SharePoint, and Microsoft Word, including Office 2010, Office 2013, Office 2016, Office 2019, and Office 365 Proplus.

What is the description of CVE-2020-0892?

CVE-2020-0892 is a remote code execution vulnerability in Microsoft Word that occurs when it fails to properly handle objects in memory.

How can I fix CVE-2020-0892?

To fix CVE-2020-0892, users should apply the latest security updates and patches provided by Microsoft.