Ohne Score

CVE-2020-1447

Microsoft Microsoft SharePoint Enterprise Server; Microsoft Microsoft SharePoint Server; Microsoft Microsoft Office; Microsoft Microsoft Office Online Server Veröffentlicht: 2020-07-15 01:54 (vor 6 Jahren)

Beschreibung

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Hersteller	Produkt	Versionen
Microsoft	Microsoft 365 Apps for Enterprise for 32-bit Systems	unspecified
Microsoft	Microsoft 365 Apps for Enterprise for 64-bit Systems	unspecified
Microsoft	Microsoft Office	2019 for 32-bit editions, 2019 for 64-bit editions, 2019 for Mac, 2016 for Mac, 2010 Service Pack 2 (32-bit editions), 2010 Service Pack 2 (64-bit editions)
Microsoft	Microsoft Office Online Server	unspecified
Microsoft	Microsoft Office Web Apps	2010 Service Pack 2, 2013 Service Pack 1
Microsoft	Microsoft SharePoint Enterprise Server	2016, 2013 Service Pack 1
Microsoft	Microsoft SharePoint Server	2019, 2010 Service Pack 2
Microsoft	Microsoft Word	2016 (32-bit edition), 2016 (64-bit edition), 2010 Service Pack 2 (32-bit editions), 2010 Service Pack 2 (64-bit editions), 2013 RT Service Pack 1, 2013 Service Pack 1 (32-bit editions), 2013 Service Pack 1 (64-bit editions)

Referenzen und Patches

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1447

CVSS-Score

Noch nicht bewertet. Erscheint hier, sobald CNA, CISA oder NVD bewerten.

EPSS (Ausnutzungswahrscheinlichkeit in 30 Tagen)

10.63%

höher als 96 % aller CVEs

Zeitverlauf

ID reserviert2019-11-04
Veröffentlicht2020-07-15 01:54
Bei IP-DB eingegangen2026-10-25 00:05
Zuletzt aktualisiert2024-08-04 09:39

Vergeben von (CNA): microsoft

In der Quelle ansehen: CVE.org · NVD

Benachrichtigung bei neuen Schwachstellen in diesen Produkten

E-Mail-Warnungen aktivieren

Kostenlos · mit Konto · jederzeit abbestellbar

Neue CVEs im selben Produkt — Microsoft Office / 365 Apps

6.5Mittel

CVE-2026-108454 vor 23 Tagen

Microsoft Office PowerPoint Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Buffer over-read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

6.5Mittel

CVE-2026-108455 vor 23 Tagen

Microsoft Office PowerPoint Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

6.5Mittel

CVE-2026-108453 vor 23 Tagen

Microsoft Office PowerPoint Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network.

8.8Hoch

CVE-2026-108450 vor 23 Tagen

Microsoft Office Word Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

8.8Hoch

CVE-2026-108451 vor 23 Tagen

Microsoft Office Word Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network.

8.8Hoch

CVE-2026-108449 vor 23 Tagen

Microsoft Office Word Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network.