CVE-2020-1449: Critical severity microsoft 365 apps for enterprise vulnerability

Published Jul 14, 2020

Updated

A remote code execution vulnerability exists in Microsoft Project software when the software fails to check the source markup of a file, aka 'Microsoft Project Remote Code Execution Vulnerability'.

Affected Software

9 affected components

Microsoft 365 Apps

Microsoft Office=2010-sp2

Microsoft Office=2013-sp1

Microsoft Office=2019

Microsoft Project 2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1449

Event History

Jul 14, 2020

CVE Published

via MITRE·10:54 PM

Data Sourced

via MITRE·10:54 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2020-1449?

CVE-2020-1449 has a CVSS score that indicates it is a critical vulnerability requiring immediate attention.

How do I fix CVE-2020-1449?

To mitigate CVE-2020-1449, users should apply the latest security updates from Microsoft for affected software.

What software is affected by CVE-2020-1449?

CVE-2020-1449 affects Microsoft 365 Apps, Microsoft Office 2010, 2013, 2019, and Microsoft Project Professional 2016.

Can CVE-2020-1449 be exploited remotely?

Yes, CVE-2020-1449 can be exploited remotely through malicious files, leading to potential remote code execution.

What are the potential impacts of CVE-2020-1449?

Exploitation of CVE-2020-1449 can lead to unauthorized access, data loss, and complete compromise of the affected systems.