CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-1446

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1447, CVE-2020-1448.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.279

EPSS Ranking 96.1%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.8

References

Products affected by CVE-2020-1446

Microsoft » 365 Apps » Version: N/A

cpe:2.3:a:microsoft:365_apps:-
Microsoft » Office » Version: 2010

cpe:2.3:a:microsoft:office:2010
Microsoft » Office » Version: 2016

cpe:2.3:a:microsoft:office:2016
Microsoft » Office » Version: 2019

cpe:2.3:a:microsoft:office:2019
Microsoft » Office Online Server » Version: 1.0

cpe:2.3:a:microsoft:office_online_server:1.0
Microsoft » Office Web Apps » Version: 2010

cpe:2.3:a:microsoft:office_web_apps:2010
Microsoft » Office Web Apps » Version: 2013

cpe:2.3:a:microsoft:office_web_apps:2013
Microsoft » Sharepoint Enterprise Server » Version: 2013

cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013
Microsoft » Sharepoint Enterprise Server » Version: 2016

cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016
Microsoft » Sharepoint Server » Version: 2010

cpe:2.3:a:microsoft:sharepoint_server:2010
Microsoft » Sharepoint Server » Version: 2019

cpe:2.3:a:microsoft:sharepoint_server:2019
Microsoft » Word » Version: 2010

cpe:2.3:a:microsoft:word:2010
Microsoft » Word » Version: 2013

cpe:2.3:a:microsoft:word:2013
Microsoft » Word » Version: 2016

cpe:2.3:a:microsoft:word:2016
Microsoft » Word Rt » Version: 2013

cpe:2.3:a:microsoft:word_rt:2013

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-1446

Products

Pricing

Contact Us