Unscored

CVE-2020-0855

Microsoft Microsoft Office; Microsoft Office 365 ProPlus Published: 2020-03-12 18:48 (6 years ago)

Description

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0892.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
Microsoft	Microsoft Office	2019 for Mac
Microsoft	Office 365 ProPlus	32-bit Systems, 64-bit Systems

References and patches

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0855

CVSS score

Not scored yet. It appears here once the CNA, CISA or NVD scores it.

EPSS (chance of exploitation in 30 days)

11.83%

higher than 96% of all CVEs

Timeline

ID reserved2019-11-04
Published2020-03-12 18:48
Reached IP-DB2026-10-25 00:05
Last updated2024-08-04 09:18

Assigned by (CNA): microsoft

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Recent CVEs in the same product — Microsoft Office / 365 Apps

8.8High

CVE-2026-120003 yesterday

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

8.8High

CVE-2026-120001 yesterday

Microsoft Office PowerPoint Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

6.5Medium

CVE-2026-119999 yesterday

Microsoft Office Excel Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

7.8High

CVE-2026-119997 yesterday

Microsoft Office Outlook Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

6.5Medium

CVE-2026-119998 yesterday

Microsoft Office Security Feature Bypass Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Product ui does not warn user of unsafe actions in Microsoft Office allows an unauthorized attacker to bypass a security feature over a network.

7.5High

CVE-2026-119995 yesterday

Microsoft Office Outlook Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.