CVE-2020-0852

high · 7.8

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0855, CVE-2020-0892.

7.8

CVSS

12.0%

EPSS (exploit prob.)

96th

EPSS percentile

2020-03-12

Published

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Affected versions
microsoft	office	2016
microsoft	office	2019
microsoft	office_online_server	1.0
microsoft	sharepoint_server	2019

Check a specific version with /api/v1/cve/match.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0852
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0852

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-0852