CVE-2020-17125HighCVSS 7.8
Microsoft Excel Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Is the Preview Pane an attack vector for this vulnerability? No, the Preview Pane is not an attack vector.
🎯 Affected products13
- Microsoft 365 Apps for Enterprise for 32-bit Systems
- Microsoft 365 Apps for Enterprise for 64-bit Systems
- Microsoft Excel 2010 Service Pack 2 (32-bit editions)
- Microsoft Excel 2010 Service Pack 2 (64-bit editions)
- Microsoft Excel 2013 RT Service Pack 1
- Microsoft Excel 2013 Service Pack 1 (32-bit editions)
- Microsoft Excel 2013 Service Pack 1 (64-bit editions)
- Microsoft Excel 2016 (32-bit edition)
- Microsoft Excel 2016 (64-bit edition)
- Microsoft Office 2019 for 32-bit editions
- Microsoft Office 2019 for 64-bit editions
- Microsoft Office Online Server
- Microsoft Office Web Apps 2013 Service Pack 1
✅ Remediation
KBClick to Run (Security Update) — fixed build https://aka.ms/OfficeSecurityReleases KB4486750 (Security Update) KB4486754 (Security Update) KB4493148 (Security Update) KB4493139 (Security Update) KB4486760 (Security Update)
🔗 References (15)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-17125
- referencehttps://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
- patchhttps://www.microsoft.com/download/details.aspx?familyid=8cd5b65b-3454-4df7-8bb8-39701f06f06c
- referencehttps://support.microsoft.com/kb/4486750
- patchhttps://www.microsoft.com/download/details.aspx?familyid=69396647-9152-4e8c-a917-782940551aee
- referencehttps://support.microsoft.com/kb/4486754
- patchhttps://www.microsoft.com/download/details.aspx?familyid=e32a912c-ae7c-4efe-b049-e2ab41a48032
- patchhttps://www.microsoft.com/download/details.aspx?familyid=f8adf8be-1608-41cf-8fbd-fc6f2bc2b84b
- referencehttps://support.microsoft.com/kb/4493148
- patchhttps://www.microsoft.com/download/details.aspx?familyid=4540f5bf-a3dc-4211-b276-527c12b6b285
- referencehttps://support.microsoft.com/kb/4493139
- patchhttps://www.microsoft.com/download/details.aspx?familyid=e6887727-e04e-4264-b770-b294a001f3ba
- patchhttps://www.microsoft.com/download/details.aspx?familyid=df299c8c-99e3-4cb3-a341-8550afe9d495
- patchhttps://www.microsoft.com/download/details.aspx?familyid=c0475886-6469-436c-8980-71dff74835d0
- referencehttps://support.microsoft.com/en-us/help/4486760