CVE-2020-1226: Use After Free
First published: Tue Jun 09 2020(Updated: )
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft 365 Apps for enterprise | ||
| Microsoft Office Excel | =2010-sp2 | |
| Microsoft Office Excel | =2013-sp1 | |
| Microsoft Office Excel | =2013-sp1 | |
| Microsoft Office Excel | =2016 | |
| Microsoft Office for Mac OS X | =2016 | |
| Microsoft Office | =2019 | |
| Microsoft Office for Mac OS X | =2019 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-1226?
CVE-2020-1226 has a severity rating of critical due to its potential for remote code execution.
How do I fix CVE-2020-1226?
To fix CVE-2020-1226, users should apply the latest security updates provided by Microsoft for their affected software.
What versions of Microsoft Excel are affected by CVE-2020-1226?
CVE-2020-1226 affects multiple versions of Microsoft Excel including 2010 SP2, 2013 SP1, 2016, and 2019 across various platforms.
Can CVE-2020-1226 be exploited remotely?
Yes, CVE-2020-1226 can be exploited remotely if a user opens a specially crafted Excel file.
What kind of attacks can occur due to CVE-2020-1226?
Exploitation of CVE-2020-1226 could allow an attacker to execute arbitrary code on the affected system.
- agent/references
- agent/type
- agent/remedy
- agent/weakness
- agent/author
- agent/severity
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft 365 apps for enterprise
- canonical/microsoft office excel
- version/microsoft office excel/2010-sp2
- version/microsoft office excel/2013-sp1
- version/microsoft office excel/2016
- canonical/microsoft office for mac os x
- version/microsoft office for mac os x/2016
- canonical/microsoft office
- version/microsoft office/2019
- version/microsoft office for mac os x/2019