CVE-2020-0901: Critical severity microsoft 365 apps for enterprise vulnerability

Published May 21, 2020

Updated

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

Affected Software

8 affected components

Microsoft 365 Apps

Microsoft Office=2010-sp2

Microsoft Office=2013-sp1

Microsoft Office=2016

Microsoft Office Mac Os=2016

Microsoft Office=2019

Microsoft Office Macos=2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0901

Event History

May 21, 2020

CVE Published

via MITRE·10:52 PM

Data Sourced

via MITRE·10:52 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-0901?

CVE-2020-0901 has a critical severity rating due to its potential for remote code execution.

How do I fix CVE-2020-0901?

To fix CVE-2020-0901, ensure that you install the latest updates and patches provided by Microsoft for affected versions of Excel.

Which versions of Microsoft Excel are affected by CVE-2020-0901?

CVE-2020-0901 affects Microsoft Excel 2010, 2013, 2016, 2019, Microsoft 365 apps, and their respective Mac versions.

What type of vulnerability is CVE-2020-0901?

CVE-2020-0901 is a remote code execution vulnerability that arises from improper handling of objects in memory.

Can exploitation of CVE-2020-0901 lead to data theft?

Yes, exploitation of CVE-2020-0901 can potentially allow attackers to execute arbitrary code and gain unauthorized access to sensitive data.