CVE-2020-0760

Microsoft Office Remote Code Execution Vulnerability

CVE-2020-0760 is fixed in 59 products on 1 platform, first by KB4464527, released April 14, 2020. It is not reported as exploited. Patch Radar priority: High.

High
CVSS
n/a
Important
Exploitation
None reported
Exploitation Less Likely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0882
95th percentile

<p>A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.</p> <p>To exploit the vulnerability, an attacker must first convince a user to open a specially crafted Office document.</p> <p>The updates address the vulnerability by correcting how Office handles type libraries.</p>

Where it's fixed

ProductFixed inFixReleased
Microsoft
Microsoft Access 2010 Service Pack 2 (32-bit editions) KB4464527 Apr 14, 2020
Microsoft Access 2010 Service Pack 2 (64-bit editions) KB4464527 Apr 14, 2020
Microsoft Access 2013 Service Pack 1 (32-bit editions) KB4462210 Apr 14, 2020
Microsoft Access 2013 Service Pack 1 (64-bit editions) KB4462210 Apr 14, 2020
Microsoft Access 2016 (32-bit edition) KB4484167 Apr 14, 2020
Microsoft Access 2016 (64-bit edition) KB4484167 Apr 14, 2020
Microsoft Excel 2010 Service Pack 2 (32-bit editions) KB4484285 Apr 14, 2020
Microsoft Excel 2010 Service Pack 2 (64-bit editions) KB4484285 Apr 14, 2020
Microsoft Excel 2013 RT Service Pack 1 KB4484283 Apr 14, 2020
Microsoft Excel 2013 Service Pack 1 (32-bit editions) KB4484283 Apr 14, 2020
Microsoft Excel 2013 Service Pack 1 (64-bit editions) KB4484283 Apr 14, 2020
Microsoft Excel 2016 (32-bit edition) KB4484273 Apr 14, 2020
Microsoft Excel 2016 (64-bit edition) KB4484273 Apr 14, 2020
Microsoft Office 2010 Service Pack 2 (32-bit editions) KB3203462 Apr 14, 2020
Microsoft Office 2010 Service Pack 2 (32-bit editions) KB4484126 Apr 14, 2020
Microsoft Office 2010 Service Pack 2 (64-bit editions) KB3203462 Apr 14, 2020
Microsoft Office 2010 Service Pack 2 (64-bit editions) KB4484126 Apr 14, 2020
Microsoft Office 2013 RT Service Pack 1 KB4011104 Apr 14, 2020
Microsoft Office 2013 RT Service Pack 1 KB4484117 Apr 14, 2020
Microsoft Office 2013 Service Pack 1 (32-bit editions) KB4011104 Apr 14, 2020
Microsoft Office 2013 Service Pack 1 (32-bit editions) KB4484117 Apr 14, 2020
Microsoft Office 2013 Service Pack 1 (64-bit editions) KB4011104 Apr 14, 2020
Microsoft Office 2013 Service Pack 1 (64-bit editions) KB4484117 Apr 14, 2020
Microsoft Office 2016 (32-bit edition) KB4484214 Apr 14, 2020
Microsoft Office 2016 (32-bit edition) KB3128012 Apr 14, 2020
Microsoft Office 2016 (64-bit edition) KB4484214 Apr 14, 2020
Microsoft Office 2016 (64-bit edition) KB3128012 Apr 14, 2020
Microsoft Outlook 2010 Service Pack 2 (32-bit editions) KB4484284 Apr 14, 2020
Microsoft Outlook 2010 Service Pack 2 (64-bit editions) KB4484284 Apr 14, 2020
Microsoft Outlook 2013 RT Service Pack 1 KB4484281 Apr 14, 2020
Microsoft Outlook 2013 Service Pack 1 (32-bit editions) KB4484281 Apr 14, 2020
Microsoft Outlook 2013 Service Pack 1 (64-bit editions) KB4484281 Apr 14, 2020
Microsoft Outlook 2016 (32-bit edition) KB4484274 Apr 14, 2020
Microsoft Outlook 2016 (64-bit edition) KB4484274 Apr 14, 2020
Microsoft PowerPoint 2010 Service Pack 2 (32-bit editions) KB4484235 Apr 14, 2020
Microsoft PowerPoint 2010 Service Pack 2 (64-bit editions) KB4484235 Apr 14, 2020
Microsoft PowerPoint 2013 RT Service Pack 1 KB4484226 Apr 14, 2020
Microsoft PowerPoint 2013 Service Pack 1 (32-bit editions) KB4484226 Apr 14, 2020
Microsoft PowerPoint 2013 Service Pack 1 (64-bit editions) KB4484226 Apr 14, 2020
Microsoft PowerPoint 2016 (32-bit edition) KB4484246 Apr 14, 2020
Microsoft PowerPoint 2016 (64-bit edition) KB4484246 Apr 14, 2020
Microsoft Project 2010 Service Pack 2 (32-bit editions) KB4484132 Apr 14, 2020
Microsoft Project 2010 Service Pack 2 (64-bit editions) KB4484132 Apr 14, 2020
Microsoft Project 2013 Service Pack 1 (32-bit editions) KB4484125 Apr 14, 2020
Microsoft Project 2013 Service Pack 1 (64-bit editions) KB4484125 Apr 14, 2020
Microsoft Project 2016 (32-bit edition) KB4484269 Apr 14, 2020
Microsoft Project 2016 (64-bit edition) KB4484269 Apr 14, 2020
Microsoft Publisher 2010 Service Pack 2 (32-bit editions) KB4032216 Apr 14, 2020
Microsoft Publisher 2010 Service Pack 2 (64-bit editions) KB4032216 Apr 14, 2020
Microsoft Publisher 2013 Service Pack 1 (32-bit editions) KB3162033 Apr 14, 2020
Microsoft Publisher 2013 Service Pack 1 (64-bit editions) KB3162033 Apr 14, 2020
Microsoft Publisher 2016 (32-bit edition) KB4011097 Apr 14, 2020
Microsoft Publisher 2016 (64-bit edition) KB4011097 Apr 14, 2020
Microsoft Visio 2010 Service Pack 2 (32-bit editions) KB4462225 Apr 14, 2020
Microsoft Visio 2010 Service Pack 2 (64-bit editions) KB4462225 Apr 14, 2020
Microsoft Visio 2013 Service Pack 1 (32-bit editions) KB4464544 Apr 14, 2020
Microsoft Visio 2013 Service Pack 1 (64-bit editions) KB4464544 Apr 14, 2020
Microsoft Visio 2016 (32-bit edition) KB4484244 Apr 14, 2020
Microsoft Visio 2016 (64-bit edition) KB4484244 Apr 14, 2020
Microsoft Word 2010 Service Pack 2 (32-bit editions) KB4484295 Apr 14, 2020
Microsoft Word 2010 Service Pack 2 (64-bit editions) KB4484295 Apr 14, 2020
Microsoft Word 2013 RT Service Pack 1 KB4484319 Apr 14, 2020
Microsoft Word 2013 Service Pack 1 (32-bit editions) KB4484319 Apr 14, 2020
Microsoft Word 2013 Service Pack 1 (64-bit editions) KB4484319 Apr 14, 2020
Microsoft Word 2016 (32-bit edition) KB4484300 Apr 14, 2020
Microsoft Word 2016 (64-bit edition) KB4484300 Apr 14, 2020

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.