CVE-2020-1226: Use After Free

Published Jun 9, 2020

Updated

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225.

Affected Software

8 affected components

Microsoft 365 Apps

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Office Mac Os=2016

Microsoft Office=2019

Microsoft Office Mac Os=2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1226

Event History

Jun 9, 2020

CVE Published

via MITRE·07:43 PM

Data Sourced

via MITRE·07:43 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-1226?

CVE-2020-1226 has a severity rating of critical due to its potential for remote code execution.

How do I fix CVE-2020-1226?

To fix CVE-2020-1226, users should apply the latest security updates provided by Microsoft for their affected software.

What versions of Microsoft Excel are affected by CVE-2020-1226?

CVE-2020-1226 affects multiple versions of Microsoft Excel including 2010 SP2, 2013 SP1, 2016, and 2019 across various platforms.

Can CVE-2020-1226 be exploited remotely?

Yes, CVE-2020-1226 can be exploited remotely if a user opens a specially crafted Excel file.

What kind of attacks can occur due to CVE-2020-1226?

Exploitation of CVE-2020-1226 could allow an attacker to execute arbitrary code on the affected system.