CVE-2020-0850

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0851, CVE-2020-0852, CVE-2020-0855, CVE-2020-0892.

Score

CVSS 3.1 8.8 High

Status

Modified - secure@microsoft.com

Published

2020-03-12

Last modified

2024-08-04

Affected products

• Microsoft Office (Microsoft)
• Microsoft Office Online Server (Microsoft)
• Microsoft Sharepoint Enterprise Server (Microsoft)
• Microsoft Sharepoint Foundation (Microsoft)
• Microsoft Sharepoint Server (Microsoft)
• Microsoft Word (Microsoft)
• Office (Microsoft)
• Office 365 Proplus (Microsoft)
• Office Online Server (Microsoft)
• Sharepoint Enterprise Server (Microsoft)
• Sharepoint Foundation (Microsoft)
• Sharepoint Server (Microsoft)
• Word (Microsoft)

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0850