CVE Vulnerabilities

CVE-2020-0961

Published: Apr 15, 2020 | Modified: Nov 21, 2024
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability.

Affected Software

NameVendorStart VersionEnd Version
OfficeMicrosoft2010-sp2 (including)2010-sp2 (including)
OfficeMicrosoft2013 (including)2013 (including)
OfficeMicrosoft2013-sp1 (including)2013-sp1 (including)
OfficeMicrosoft2016 (including)2016 (including)
OfficeMicrosoft2019 (including)2019 (including)
Office_365_proplusMicrosoft- (including)- (including)

References