CVE-2020-17065HighCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector.
🎯 Affected products13
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
- Microsoft Excel 2010 Service Pack 2 (32-bit editions)
- Microsoft Excel 2010 Service Pack 2 (64-bit editions)
- Microsoft Excel 2013 RT Service Pack 1
- Microsoft Excel 2013 Service Pack 1 (32-bit editions)
- Microsoft Excel 2013 Service Pack 1 (64-bit editions)
- Microsoft Excel 2016 (32-bit edition)
- Microsoft Excel 2016 (64-bit edition)
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
- Microsoft Office Online Server
- Microsoft Office Web Apps 2013 Service Pack 1
✅ Remediation
KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KB4486713 (Security Update) KB4486718 (Security Update) KB4486743 (Security Update) KB4486734 (Security Update) KB4486727 (Security Update)
🔗 References (9)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17065
- patchhttps://www.microsoft.com/download/details.aspx?familyid=866ab700-95d1-4a3d-8c02-fa1e656ef902
- patchhttps://www.microsoft.com/download/details.aspx?familyid=818d5b81-4cf9-4583-8603-3a0ebcdb08c7
- patchhttps://www.microsoft.com/download/details.aspx?familyid=9ab43d49-4b30-47fa-99f6-97fce71bde98
- patchhttps://www.microsoft.com/download/details.aspx?familyid=84718ae6-2a2a-4390-af2a-a63fdefe0f00
- patchhttps://www.microsoft.com/download/details.aspx?familyid=48dc96e1-d6fc-491f-b84b-dec6e561220a
- patchhttps://www.microsoft.com/download/details.aspx?familyid=a946f5fd-6d56-41ad-8b16-709d9be34b01
- patchhttps://www.microsoft.com/download/details.aspx?familyid=f9905c21-8aa5-49c6-8431-4e52f32981e5
- patchhttps://www.microsoft.com/download/details.aspx?familyid=e8e4919b-4b41-41e5-9b7c-4192f9f0dee0