CVE-2020-17129: Microsoft Excel Remote Code Execution Vulnerability
Published Dec 8, 2020
·Updated
Microsoft Excel Remote Code Execution Vulnerability
Affected Software
21 affected componentsFixes available
Microsoft 365 Apps
Microsoft Excel=2010-sp2
Microsoft Excel=2013-sp1
Microsoft Excel=2013-sp1
Microsoft Excel=2016
Microsoft Office=2019
Microsoft Office Online Server
Microsoft Office Web Apps=2013-sp1
Microsoft Office Web Apps 2013
Microsoft Excel 2010
Microsoft Excel 2010
Microsoft Excel 2013
Microsoft Excel 2013
Microsoft 365 Apps for Enterprise
Microsoft Excel 2013 RT
Microsoft Office 2019 for 64-bit editions
Microsoft 365 Apps for Enterprise
Microsoft Office 2019 for 32-bit editions
Microsoft Excel 2016
Microsoft Office Online Server
Microsoft Excel 2016
Remediation
Event History
Dec 8, 2020
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
Data Sourced
via Microsoft·08:00 AM
Affected Software
Updated
via Microsoft·08:00 AM
Description
Dec 9, 2020
CVE Published
via MITRE·11:36 PM
Data Sourced
via MITRE·11:36 PM
DescriptionSeverity
Dec 10, 2020
Data Sourced
via NVD·12:15 AM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is CVE-2020-17129?
CVE-2020-17129 is a remote code execution vulnerability in Microsoft Excel.
2
What is the severity of CVE-2020-17129?
CVE-2020-17129 has a severity rating of 7.8 (Critical).
3
Which software versions are affected by CVE-2020-17129?
CVE-2020-17129 affects Microsoft Office LTSC for Mac 2021, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2019, Microsoft Office Online Server, and Microsoft Office Web Apps 2013 SP1.
4
How can I fix CVE-2020-17129?
To fix CVE-2020-17129, install the security updates provided by Microsoft.
5
Where can I find more information about CVE-2020-17129?
You can find more information about CVE-2020-17129 on the Microsoft Security Guidance Advisory page.