Microsoft Word Security Feature Bypass Vulnerability

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products13

• Microsoft 365 Apps for Enterprise for 32-bit Systems
• Microsoft 365 Apps for Enterprise for 64-bit Systems
• Microsoft Office 2010 Service Pack 2 (32-bit editions)
• Microsoft Office 2010 Service Pack 2 (64-bit editions)
• Microsoft Office 2019 for 32-bit editions
• Microsoft Office 2019 for 64-bit editions
• Microsoft Word 2010 Service Pack 2 (32-bit editions)
• Microsoft Word 2010 Service Pack 2 (64-bit editions)
• Microsoft Word 2013 RT Service Pack 1
• Microsoft Word 2013 Service Pack 1 (32-bit editions)
• Microsoft Word 2013 Service Pack 1 (64-bit editions)
• Microsoft Word 2016 (32-bit edition)
• Microsoft Word 2016 (64-bit edition)

✅ Remediation

KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KB4486719 (Security Update) KB4486738 (Security Update) KB4486740 (Security Update) KB4486730 (Security Update)

🔗 References (9)

• advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17020
• patchhttps://www.microsoft.com/download/details.aspx?familyid=af00e20b-3992-43a5-b2ad-3fd9bb018bc5
• patchhttps://www.microsoft.com/download/details.aspx?familyid=7c42ef03-4cad-4897-9336-1be5d0b48678
• patchhttps://www.microsoft.com/download/details.aspx?familyid=33fa0817-53a2-4938-8e74-fb6fa2d44911
• patchhttps://www.microsoft.com/download/details.aspx?familyid=a6b0b71b-2bce-4f22-bbe3-0af888670f04
• patchhttps://www.microsoft.com/download/details.aspx?familyid=cd6e3235-03c0-4b99-9810-dfb309d42c79
• patchhttps://www.microsoft.com/download/details.aspx?familyid=6fee26ee-3cdc-44ca-8410-d40f4cd44d3b
• patchhttps://www.microsoft.com/download/details.aspx?familyid=bb3ba777-25da-4d4c-a72a-b773ed4c2bc1
• patchhttps://www.microsoft.com/download/details.aspx?familyid=94d52d64-a4ef-4c67-8e5d-765f377aefb8