Unscored

CVE-2020-1446

Microsoft Microsoft SharePoint Enterprise Server; Microsoft Microsoft SharePoint Server; Microsoft Microsoft Office; Microsoft Microsoft Office Online Server Published: 2020-07-15 01:54 (6 years ago)

Description

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
Microsoft	Microsoft 365 Apps for Enterprise for 32-bit Systems	unspecified
Microsoft	Microsoft 365 Apps for Enterprise for 64-bit Systems	unspecified
Microsoft	Microsoft Office	2019 for 32-bit editions, 2019 for 64-bit editions, 2019 for Mac, 2016 for Mac, 2010 Service Pack 2 (32-bit editions), 2010 Service Pack 2 (64-bit editions)
Microsoft	Microsoft Office Online Server	unspecified
Microsoft	Microsoft Office Web Apps	2010 Service Pack 2, 2013 Service Pack 1
Microsoft	Microsoft SharePoint Enterprise Server	2016, 2013 Service Pack 1
Microsoft	Microsoft SharePoint Server	2019, 2010 Service Pack 2
Microsoft	Microsoft Word	2016 (32-bit edition), 2016 (64-bit edition), 2010 Service Pack 2 (32-bit editions), 2010 Service Pack 2 (64-bit editions), 2013 RT Service Pack 1, 2013 Service Pack 1 (32-bit editions), 2013 Service Pack 1 (64-bit editions)

References and patches

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1446

CVSS score

Not scored yet. It appears here once the CNA, CISA or NVD scores it.

EPSS (chance of exploitation in 30 days)

11.23%

higher than 96% of all CVEs

Timeline

ID reserved2019-11-04
Published2020-07-15 01:54
Reached IP-DB2026-10-25 00:05
Last updated2024-08-04 09:39

Assigned by (CNA): microsoft

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Recent CVEs in the same product — Microsoft Office / 365 Apps

8.8High

CVE-2026-120003 yesterday

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

8.8High

CVE-2026-120001 yesterday

Microsoft Office PowerPoint Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

6.5Medium

CVE-2026-119999 yesterday

Microsoft Office Excel Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

7.8High

CVE-2026-119997 yesterday

Microsoft Office Outlook Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

6.5Medium

CVE-2026-119998 yesterday

Microsoft Office Security Feature Bypass Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Product ui does not warn user of unsafe actions in Microsoft Office allows an unauthorized attacker to bypass a security feature over a network.

7.5High

CVE-2026-119995 yesterday

Microsoft Office Outlook Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.