CVE-2020-0980

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
Microsoft	Microsoft SharePoint Enterprise Server	2016; 2013 Service Pack 1
Microsoft	Microsoft SharePoint Server	2019; 2010 Service Pack 2
Microsoft	Microsoft Office	2019 for 32-bit editions; 2019 for 64-bit editions; 2019 for Mac; 2016 for Mac; 2010 Service Pack 2 (32-bit editions); 2010 Service Pack 2 (64-bit editions)
Microsoft	Office 365 ProPlus	32-bit Systems; 64-bit Systems
Microsoft	Microsoft Office Online Server	unspecified
Microsoft	Microsoft Word	2016 (32-bit edition); 2016 (64-bit edition); 2010 Service Pack 2 (32-bit editions); 2010 Service Pack 2 (64-bit editions); 2013 RT Service Pack 1; 2013 Service Pack 1 (32-bit editions); 2013 Service Pack 1 (64-bit editions)
Microsoft	Microsoft Office Web Apps	2010 Service Pack 2; 2013 Service Pack 1

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0980Patch, Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0980Patch, Vendor Advisory

Timeline

Published: Apr 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-09818.8A security feature bypass vulnerability exists when Windows fails to properly handle token relationships.An attacker who successfully exploi CVE-2020-09825.5An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Micr CVE-2020-09837.8An elevation of privilege vulnerability exists when the Windows Delivery Optimization service improperly handles objects in memory, aka 'Win CVE-2020-09847.8An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before e CVE-2020-09857.8An elevation of privilege vulnerability exists when the Windows Update Stack fails to properly handle objects in memory, aka 'Windows Update CVE-2020-09867.8An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka 'Windows Kernel Eleva CVE-2020-09875.5An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory, aka 'Micr CVE-2020-09887.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En CVE-2020-09895.5<p>An information disclosure vulnerability exists when Windows Mobile Device Management (MDM) Diagnostics improperly handles junctions. An a CVE-2020-09917.8A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka CVE-2020-09927.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En CVE-2020-09936.5A denial of service vulnerability exists in Windows DNS when it fails to properly handle queries, aka 'Windows DNS Denial of Service Vulnera