CVE Vulnerabilities

CVE-2020-1447

Published: Jul 14, 2020 | Modified: Jul 21, 2021
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka Microsoft Word Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448.

Affected Software

Name Vendor Start Version End Version
365_apps Microsoft - (including) - (including)
Office Microsoft 2010-sp2 (including) 2010-sp2 (including)
Office Microsoft 2016 (including) 2016 (including)
Office Microsoft 2019 (including) 2019 (including)
Office_online_server Microsoft 1.0 (including) 1.0 (including)
Office_web_apps Microsoft 2010-sp2 (including) 2010-sp2 (including)
Office_web_apps Microsoft 2013-sp1 (including) 2013-sp1 (including)
Sharepoint_enterprise_server Microsoft 2013-sp1 (including) 2013-sp1 (including)
Sharepoint_enterprise_server Microsoft 2016 (including) 2016 (including)
Sharepoint_server Microsoft 2010-sp2 (including) 2010-sp2 (including)
Sharepoint_server Microsoft 2019 (including) 2019 (including)
Word Microsoft 2010-sp2 (including) 2010-sp2 (including)
Word Microsoft 2013-sp1 (including) 2013-sp1 (including)
Word Microsoft 2016 (including) 2016 (including)
Word_rt Microsoft 2013-sp1 (including) 2013-sp1 (including)

References