High severity7.8NVD Advisory· Published Apr 15, 2020· Updated Jun 17, 2026
CVE-2020-0961
CVE-2020-0961
Description
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.
Affected products
9cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2013:*:*:*:rt:*:*:*
- cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
- (no CPE)range: 32-bit Systems
- Range: 2019 for 32-bit editions
Patches
Vulnerability mechanics
References
1- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0961nvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.