Input validation error in Microsoft products - CVE-2020-0760
Published: April 14, 2020
Vulnerability identifier: #VU26852
CSH Severity: High
CVSS v4: 8.4 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-0760
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the system.
The vulnerability exists due to the Microsoft Office improperly loads arbitrary type libraries. A remote attacker can trick a victim to open a specially crafted Office document and execute arbitrary code on the target system.
Affected software
Microsoft Office
Microsoft Publisher
Microsoft Word
Microsoft Visio
Microsoft Excel
Microsoft Outlook
Microsoft Access
Microsoft PowerPoint
Microsoft Project
Microsoft Project Server
Microsoft Publisher
Microsoft Word
Microsoft Visio
Microsoft Excel
Microsoft Outlook
Microsoft Access
Microsoft PowerPoint
Microsoft Project
Microsoft Project Server
How to mitigate CVE-2020-0760
Install updates from vendor's website.