High severity7.8NVD Advisory· Published Mar 12, 2020· Updated Jun 17, 2026
CVE-2020-0892
CVE-2020-0892
Description
A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855.
Affected products
25cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
- (no CPE)range: 32-bit Systems
cpe:2.3:a:microsoft:office_online_server:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:office_online_server:1.0:*:*:*:*:*:*:*
- (no CPE)range: unspecified
cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*
- (no CPE)range: 2010 Service Pack 2
cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
- (no CPE)range: 2016
- (no CPE)range: 2019
cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*
- (no CPE)range: 2013 Service Pack 1
cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*
- cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 2016 (32-bit edition)
- Range: 2019 for 32-bit editions
Patches
Vulnerability mechanics
References
1- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0892nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.