CVE-2020-0892

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
MicrosoftMicrosoft SharePoint Foundation2013 Service Pack 1
MicrosoftMicrosoft SharePoint Enterprise Server2016; 2013 Service Pack 1
MicrosoftMicrosoft SharePoint Server2019; 2010 Service Pack 2
MicrosoftMicrosoft Office2019 for 32-bit editions; 2019 for 64-bit editions; 2019 for Mac; 2016 for Mac; 2010 Service Pack 2 (32-bit editions); 2010 Service Pack 2 (64-bit editions)
MicrosoftOffice 365 ProPlus32-bit Systems; 64-bit Systems
MicrosoftMicrosoft Office Online Serverunspecified
MicrosoftMicrosoft Word2016 (32-bit edition); 2016 (64-bit edition); 2010 Service Pack 2 (32-bit editions); 2010 Service Pack 2 (64-bit editions); 2013 RT Service Pack 1; 2013 Service Pack 1 (32-bit editions); 2013 Service Pack 1 (64-bit editions)
MicrosoftMicrosoft Office Web Apps2010 Service Pack 2

References

Timeline

Published
Mar 12, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-08935.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesCVE-2020-08945.4A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web requesCVE-2020-08957.5A remote code execution vulnerability exists in the way that the VBScript engine handles objects in memory, aka 'Windows VBScript Engine RemCVE-2020-08967.8An elevation of privilege vulnerability exists when Windows improperly handles hard links, aka 'Windows Hard Link Elevation of Privilege VulCVE-2020-08977.8An elevation of privilege vulnerability exists when the Windows Work Folder Service improperly handles file operations, aka 'Windows Work FoCVE-2020-08987.8An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows GraphiCVE-2020-08995.5An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'MicrosCVE-2020-09005.5An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'VCVE-2020-09019.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An atCVE-2020-09029.8An elevation of privilege vulnerability exists in Service Fabric File Store Service under certain conditions, aka 'Service Fabric Elevation CVE-2020-09035.4A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request CVE-2020-09046.5<p>A denial of service vulnerability exists when Microsoft Hyper-V on a host server fails to properly validate specific malicious data from
CVE-2020-0892: High severity, CVSS 7.8 | Vulnix