CVE-2020-1447

high · 8.8

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1448.

8.8

CVSS

10.6%

EPSS (exploit prob.)

96th

EPSS percentile

2020-07-14

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Affected versions
microsoft	365_apps	all versions
microsoft	office	2010
microsoft	office	2016
microsoft	office	2019
microsoft	office	2019
microsoft	office_online_server	1.0
microsoft	office_web_apps	2010
microsoft	office_web_apps	2013
microsoft	sharepoint_enterprise_server	2013
microsoft	sharepoint_enterprise_server	2016
microsoft	sharepoint_server	2010
microsoft	sharepoint_server	2019
microsoft	word	2010
microsoft	word	2013
microsoft	word	2016
microsoft	word_rt	2013

Check a specific version with /api/v1/cve/match.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1447
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1447

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2020-1447