CVE-2020-1496: Microsoft Excel Remote Code Execution Vulnerability
First published: Mon Aug 17 2020(Updated: )
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1494, CVE-2020-1495, CVE-2020-1498, CVE-2020-1504.
Credit: secure@microsoft.com secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| microsoft 365 apps | ||
| Microsoft Excel for Mac | =2010-sp2 | |
| Microsoft Excel for Mac | =2013-sp1 | |
| Microsoft Excel for Mac | =2013-sp1 | |
| Microsoft Excel for Mac | =2016 | |
| Microsoft Office | =2010-sp2 | |
| Microsoft Office | =2013-sp1 | |
| Microsoft Office | =2013-sp1 | |
| Microsoft Office | =2016 | |
| Microsoft Office | =2019 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2020-1496?
CVE-2020-1496 has a critical severity rating due to its potential for remote code execution.
How do I fix CVE-2020-1496?
To fix CVE-2020-1496, users should install the latest security updates provided by Microsoft for affected versions of Excel and Office.
Which software versions are affected by CVE-2020-1496?
CVE-2020-1496 affects various versions of Microsoft Excel and Microsoft Office, including 2010, 2013, 2016, and 2019.
What type of vulnerability is CVE-2020-1496?
CVE-2020-1496 is a remote code execution vulnerability that occurs when Excel improperly handles objects in memory.
Can CVE-2020-1496 be exploited remotely?
Yes, CVE-2020-1496 can be exploited remotely, allowing attackers to execute arbitrary code on the victim's machine.
- agent/type
- agent/first-publish-date
- agent/author
- agent/title
- agent/severity
- agent/references
- agent/remedy
- agent/event
- agent/description
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft 365 apps
- canonical/microsoft excel for mac
- version/microsoft excel for mac/2010-sp2
- version/microsoft excel for mac/2013-sp1
- version/microsoft excel for mac/2016
- canonical/microsoft office
- version/microsoft office/2010-sp2
- version/microsoft office/2013-sp1
- version/microsoft office/2016
- version/microsoft office/2019