What is CVE-2020-1504?

CVE-2020-1504 is a high-severity vulnerability in Microsoft Excel. CVSS score: 8.8/10. Published 2020-08-17.

How severe is CVE-2020-1504?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Microsoft Excel

CVE-2020-1504

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the…

EPSS: 0.042 (89.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Microsoft Excel — versions 2010
Microsoft Excel 2010 Service Pack 2 — versions 13.0.0.0

References

secure@microsoft.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2020-1504?: CVE-2020-1504 is a high-severity vulnerability in Microsoft Excel. CVSS score: 8.8/10. Published 2020-08-17.
How severe is CVE-2020-1504?: High severity. CVSS v3 base score is 8.8 out of 10.