CVE-2020-0961: Critical severity microsoft office vulnerability

Published Apr 15, 2020

Updated

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.

Affected Software

6 affected components

Microsoft Office=2010-sp2

Microsoft Office=2013

Microsoft Office=2013-sp1

Microsoft Office=2016

Microsoft Office=2019

Microsoft Office 365 ProPlus

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0961

Event History

Apr 15, 2020

CVE Published

via MITRE·03:13 PM

Data Sourced

via MITRE·03:13 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-0961?

CVE-2020-0961 is a remote code execution vulnerability in the Microsoft Office Access Connectivity Engine.

How does CVE-2020-0961 affect Microsoft Office?

CVE-2020-0961 affects multiple versions of Microsoft Office, including 2010, 2013, 2016, and 2019, as well as Office 365 Proplus.

What is the severity of CVE-2020-0961?

CVE-2020-0961 has a severity rating of 7.8, which is considered critical.

How can I fix CVE-2020-0961?

To fix CVE-2020-0961, Microsoft has released security updates for the affected versions of Microsoft Office. It is recommended to install these updates as soon as possible.

Where can I find more information about CVE-2020-0961?

You can find more information about CVE-2020-0961 on the Microsoft Security Guidance Advisory page: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0961