CVE-2020-1225: Use After Free
First published: Tue Jun 09 2020(Updated: )
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft 365 Apps for enterprise | ||
| Microsoft Office Excel | =2010-sp2 | |
| Microsoft Office Excel | =2013-sp1 | |
| Microsoft Office Excel | =2013-sp1 | |
| Microsoft Office Excel | =2016 | |
| Microsoft Office for Mac OS X | =2016 | |
| Microsoft Office | =2019 | |
| Microsoft Office for Mac OS X | =2019 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-1225?
CVE-2020-1225 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2020-1225?
To fix CVE-2020-1225, users should apply the latest security updates provided by Microsoft for affected versions of Excel.
Which software versions are affected by CVE-2020-1225?
CVE-2020-1225 affects multiple versions of Microsoft Excel, including Excel 2010, 2013, 2016, and 2019 for both Windows and Mac.
What impact does CVE-2020-1225 have if exploited?
If exploited, CVE-2020-1225 allows an attacker to execute arbitrary code on the victim's system, potentially leading to data leakage or system compromise.
Are there any known exploits for CVE-2020-1225?
Yes, there are reports indicating that CVE-2020-1225 has been targeted by attackers in the wild.
- agent/references
- agent/type
- agent/remedy
- agent/weakness
- agent/author
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft 365 apps for enterprise
- canonical/microsoft office excel
- version/microsoft office excel/2010-sp2
- version/microsoft office excel/2013-sp1
- version/microsoft office excel/2016
- canonical/microsoft office for mac os x
- version/microsoft office for mac os x/2016
- canonical/microsoft office
- version/microsoft office/2019
- version/microsoft office for mac os x/2019