CVE-2020-17062HighCVSS 7.8
Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector.
🎯 Affected products11
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
- Microsoft Office 2010 Service Pack 2 (32-bit editions)
- Microsoft Office 2010 Service Pack 2 (64-bit editions)
- Microsoft Office 2013 RT Service Pack 1
- Microsoft Office 2013 Service Pack 1 (32-bit editions)
- Microsoft Office 2013 Service Pack 1 (64-bit editions)
- Microsoft Office 2016 (32-bit edition)
- Microsoft Office 2016 (64-bit edition)
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
✅ Remediation
KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KB4484508 (Security Update) KB4484534 (Security Update) KB4484520 (Security Update)
🔗 References (7)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17062
- patchhttps://www.microsoft.com/download/details.aspx?familyid=1db01dbb-2c09-4223-b475-293c5713d319
- patchhttps://www.microsoft.com/download/details.aspx?familyid=7cfece7d-a36c-4687-92e1-b69e75f3ab58
- patchhttps://www.microsoft.com/download/details.aspx?familyid=6dc44de5-796c-45a4-8fae-48d425306843
- patchhttps://www.microsoft.com/download/details.aspx?familyid=5b3c306e-25c2-4d13-8cdc-6376f22cdae4
- patchhttps://www.microsoft.com/download/details.aspx?familyid=fe476d8d-403f-4db5-9977-c346c5afadb2
- patchhttps://www.microsoft.com/download/details.aspx?familyid=49edd856-8ebf-46a6-818c-b55933c8f982