CVE-2020-17128: Microsoft Excel Remote Code Execution Vulnerability
Published Dec 8, 2020
·Updated
Microsoft Excel Remote Code Execution Vulnerability
Affected Software
28 affected componentsFixes available
Microsoft 365 Apps
Microsoft Excel=2010-sp2
Microsoft Excel=2013-sp1
Microsoft Excel=2013-sp1
Microsoft Excel=2016
Microsoft Office=2010-sp2
Microsoft Office=2016
Microsoft Office Macos=2019
Microsoft Office Online Server
Microsoft Office Web Apps=2013-sp1
Microsoft Office Web Apps 2013
Microsoft Office 2010
Microsoft Excel 2010
Microsoft Excel 2013 RT
Microsoft Office 2010
Microsoft Excel 2010
Microsoft Excel 2016
Microsoft Office 2016
Microsoft Office 2016
Microsoft Excel 2016
Microsoft Excel 2013
Microsoft Excel 2013
Microsoft 365 Apps for Enterprise
Microsoft Office Online Server
Microsoft Office 2019 for Mac
Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft 365 Apps for Enterprise
Remediation
Event History
Dec 8, 2020
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·08:00 AM
Affected Software
Updated
via Microsoft·08:00 AM
Description
Dec 9, 2020
CVE Published
via MITRE·11:36 PM
Data Sourced
via MITRE·11:36 PM
DescriptionSeverity
Dec 10, 2020
Data Sourced
via NVD·12:15 AM
RemedyDescriptionSeverityAffected Software
Aug 12, 58408
Event
02:20 PM
Frequently Asked Questions
1
What is the severity of CVE-2020-17128?
CVE-2020-17128 has a critical severity rating indicating a high potential for exploitation.
2
How do I fix CVE-2020-17128?
To fix CVE-2020-17128, install the latest security updates provided by Microsoft for the affected Excel and Office versions.
3
What products are affected by CVE-2020-17128?
CVE-2020-17128 affects Microsoft Excel 2010, 2013, 2016, 2019, and various versions of Microsoft Office applications.
4
What type of vulnerability is CVE-2020-17128?
CVE-2020-17128 is a remote code execution vulnerability that could allow an attacker to execute arbitrary code.
5
What are the potential impacts of CVE-2020-17128?
The potential impact of CVE-2020-17128 includes unauthorized access to sensitive data or control over a vulnerable system.