CVE-2020-1225: Use After Free

Published Jun 9, 2020

Updated

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226.

Affected Software

8 affected components

Microsoft 365 Apps

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Office Mac Os=2016

Microsoft Office=2019

Microsoft Office Mac Os=2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1225

Event History

Jun 9, 2020

CVE Published

via MITRE·07:43 PM

Data Sourced

via MITRE·07:43 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-1225?

CVE-2020-1225 is classified as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2020-1225?

To fix CVE-2020-1225, users should apply the latest security updates provided by Microsoft for affected versions of Excel.

Which software versions are affected by CVE-2020-1225?

CVE-2020-1225 affects multiple versions of Microsoft Excel, including Excel 2010, 2013, 2016, and 2019 for both Windows and Mac.

What impact does CVE-2020-1225 have if exploited?

If exploited, CVE-2020-1225 allows an attacker to execute arbitrary code on the victim's system, potentially leading to data leakage or system compromise.

Are there any known exploits for CVE-2020-1225?

Yes, there are reports indicating that CVE-2020-1225 has been targeted by attackers in the wild.