Security Features in Microsoft products - CVE-2020-16933
Published: October 13, 2020
Vulnerability identifier: #VU47611
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-16933
CWE-ID: CWE-254
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
This vulnerability allows a remote attacker to bypass security rescritions feature.
The vulnerability exists due to the Microsoft Word software when it fails to properly handle .LNK files. A remote attacker can trick a victim to open a specially crafted file or visit a malicious webpage and perform actions in the security context of the current user.
Affected software
Microsoft Word
Microsoft Office for macOS
Microsoft Office
Microsoft Office for macOS
Microsoft Office
How to mitigate CVE-2020-16933
Install updates from vendor's website.