CVE-2020-16957: Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
<p>A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system.</p> <p>An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file.</p> <p>The update addresses the vulnerability by correcting the way the Microsoft Office Access Connectivity Engine handles objects in memory.</p>
Other sources
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2020-16957?
CVE-2020-16957 has a CVSS score that indicates it is a high-severity vulnerability leading to remote code execution.
How do I fix CVE-2020-16957?
To fix CVE-2020-16957, you should install the latest security updates provided by Microsoft for the affected software.
What software is affected by CVE-2020-16957?
CVE-2020-16957 affects Microsoft 365 Apps and Microsoft Office 2019.
Can CVE-2020-16957 be exploited remotely?
Yes, CVE-2020-16957 can be exploited remotely, allowing an attacker to execute arbitrary code.
What are the potential impacts of CVE-2020-16957?
The potential impacts of CVE-2020-16957 include unauthorized access, data theft, and system compromise.