First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2020-0855

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0892.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Office	2019 for Mac
Microsoft	Office 365 ProPlus	32-bit Systems; 64-bit Systems

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0855Patch, Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0855Patch, Vendor Advisory

Timeline

Published: Mar 12, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-08566.5<p>An information disclosure vulnerability exists when Active Directory integrated DNS (ADIDNS) mishandles objects in memory. An authenticat CVE-2020-08577.8An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Ind CVE-2020-08587.8An elevation of privilege vulnerability exists when the "Public Account Pictures" folder improperly handles junctions.To exploit t CVE-2020-08595.5An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Insta CVE-2020-08607.8An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerab CVE-2020-08617.8An information disclosure vulnerability exists when the Windows Network Driver Interface Specification (NDIS) improperly handles memory.To e CVE-2020-08635.5An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka CVE-2020-08647.8An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Fo CVE-2020-08657.8An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Fo CVE-2020-08667.8An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work Fo CVE-2020-08677.8An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows CVE-2020-08687.8An elevation of privilege vulnerability exists when the Windows Update Orchestrator Service improperly handles file operations, aka 'Windows