First published: Fri Sep 11 2020(Updated: )
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1193, CVE-2020-1335, CVE-2020-1594.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft 365 | ||
Microsoft Office Excel | =2010-sp2 | |
Microsoft Office Excel | =2013-sp1 | |
Microsoft Office Excel | =2013-sp1 | |
Microsoft Office Excel | =2016 | |
Microsoft Office | =2019 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2020-1332 has a severity rating of critical due to its potential for remote code execution.
To fix CVE-2020-1332, ensure that Microsoft Excel and all affected Office applications are updated to the latest versions released by Microsoft.
CVE-2020-1332 affects Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2016, Microsoft 365 Apps, and Microsoft Office 2019.
Yes, CVE-2020-1332 can be exploited remotely if a user opens a specially crafted file that triggers the vulnerability.
CVE-2020-1332 is classified as a remote code execution vulnerability, allowing attackers to execute arbitrary code on the affected system.