CVE-2020-1447: High severity microsoft 365 apps for enterprise vulnerability
Published Jul 14, 2020
·Updated
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448.
Affected Software
16 affected components
Microsoft 365 Apps
Microsoft Office=2010-sp2
Microsoft Office Mac Os=2016
Microsoft Office=2019
Microsoft Office Mac Os=2019
Microsoft Office Online Server=1.0
Microsoft Office Web Apps=2010-sp2
Microsoft Office Web Apps=2013-sp1
Microsoft SharePoint Enterprise Server=2013-sp1
Microsoft SharePoint Enterprise Server=2016
Microsoft SharePoint Server=2010-sp2
Microsoft SharePoint Server=2019
Microsoft Word=2010-sp2
Microsoft Word=2013-sp1
Microsoft Word=2016
Microsoft Word Rt=2013-sp1
Remediation
Event History
Jul 14, 2020
CVE Published
via MITRE·10:54 PM
Data Sourced
via MITRE·10:54 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2020-1447?
CVE-2020-1447 is a remote code execution vulnerability in Microsoft Word software.
2
What is the severity of CVE-2020-1447?
CVE-2020-1447 has a severity rating of 8.8 (high).
3
Which software products are affected by CVE-2020-1447?
Affected software products include Microsoft Office, Microsoft Word, Microsoft SharePoint, and Microsoft Office Web Apps.
4
How can I fix CVE-2020-1447?
To fix CVE-2020-1447, apply the latest security updates provided by Microsoft.
5
Where can I find more information about CVE-2020-1447?
You can find more information about CVE-2020-1447 on the Microsoft Security Guidance Advisory page.