9.3
CVSSv2

CVE-2020-0852

Published: 12/03/2020 Updated: 21/07/2021
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0855, CVE-2020-0892.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft office 2016

microsoft office 2019

microsoft office online server 1.0

microsoft sharepoint server 2019

Recent Articles

Microsoft Patch Tuesday – March 2020
Symantec Threat Intelligence Blog • Preethi Koroth • 11 Mar 2024

This month the vendor has patched 115 vulnerabilities, 25 of which are rated Critical.

Posted: 11 Mar, 202028 Min ReadThreat Intelligence SubscribeMicrosoft Patch Tuesday – March 2020This month the vendor has patched 115 vulnerabilities, 25 of which are rated Critical.As always, customers are advised to follow these security best practices: Install vendor patches as soon as they are available. Run all software with the least privileges required while still maintaining functionality. Avoid handling files from unknown or questionabl...

Stuck at home? Need something to keep busy with? Microsoft has 115 ideas – including an awful SMBv3 security hole to worry about
The Register • Shaun Nichols in San Francisco • 11 Mar 2020

Hefty Patch Tuesday covers critical Word, Dynamics bugs, and more

Updated Microsoft has emitted more than 100 fixes in its March batch of security updates. The Patch Tuesday release includes 115-CVE listed flaws, including 26 classified as critical security risks. None of the flaws have previously been disclosed or exploited in the wild. One particularly nasty remote-code execution hole revealed this week lies within SMBv3. "An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target SMB Server or SMB Client," ...

Stuck at home? Need something to keep busy with? Microsoft has 115 ideas – including an awful SMBv3 security hole to worry about
The Register • Shaun Nichols in San Francisco • 11 Mar 2020

Hefty Patch Tuesday covers critical Word, Dynamics bugs, and more

Updated Microsoft has emitted more than 100 fixes in its March batch of security updates. The Patch Tuesday release includes 115-CVE listed flaws, including 26 classified as critical security risks. None of the flaws have previously been disclosed or exploited in the wild. One particularly nasty remote-code execution hole revealed this week lies within SMBv3. "An attacker who successfully exploited the vulnerability could gain the ability to execute code on the target SMB Server or SMB Client," ...