CVE-2020-1581: Microsoft Office Click-to-Run Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle objects in memory, aka 'Microsoft Office Click-to-Run Elevation of Privilege Vulnerability'.
Other sources
An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would need to already have the ability to execute code on the system. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The security update addresses the vulnerability by correcting how Microsoft Office Click-to-Run (C2R) components handle objects in memory.
— NVD
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1581?
CVE-2020-1581 has a severity rating of Important as it can lead to an elevation of privilege.
How do I fix CVE-2020-1581?
To fix CVE-2020-1581, update your Microsoft Office installation to the latest version to apply the security patches provided.
What software does CVE-2020-1581 affect?
CVE-2020-1581 affects Microsoft 365 Apps, Microsoft Office 2013, and Microsoft Office 2019.
What does CVE-2020-1581 allow an attacker to do?
CVE-2020-1581 allows an attacker to elevate their privileges on a compromised system.
Is CVE-2020-1581 exploited in the wild?
As of the last update, there have been no public reports of active exploitation of CVE-2020-1581 in the wild.