← Vulnerability feed

Vulnerability record · CVE-2020-0979 · published 15 April 2020

CVE-2020-0979: Microsoft office 365 proplus vulnerability

Microsoft · Office 365 Proplus

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0906.

8.8 CVSS 3.1 High EPSS 12% · top 4.1%
8.8CVSS 3.1 base score, v2 9.3
12%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0906.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0979 PatchVendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0979 PatchVendor Advisory

Track CVE-2020-0979 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2019-1297Microsoft Excel memory handling flaw allows remote code executionCVE-2019-1297 is a remote code execution vulnerability in Microsoft Excel caused by improper handling of objects in memory. An attacker who convinces…KEVEPSS 22%analysed8.8CVE-2019-0541Microsoft MSHTML engine input validation flaw allows remote code executionThe MSHTML engine in Microsoft Office, Internet Explorer and related viewers fails to properly validate input, allowing remote code execution. Becaus…KEVEPSS 53%analysed9.8CVE-2019-1449Microsoft office vulnerabilityA security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead…EPSS 6.8%9.8CVE-2019-1205Microsoft office vulnerabilityA remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory. An attacker who successfu…EPSS 4.0%8.8CVE-2020-0906Microsoft excel vulnerabilityA remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft…EPSS 12%8.8CVE-2020-0760Microsoft access vulnerabilityA remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execu…EPSS 8.8%8.8CVE-2020-0850Microsoft office vulnerabilityA remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remot…EPSS 8.8%8.8CVE-2020-0759Microsoft excel vulnerabilityA remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft…EPSS 15%

Source: NIST National Vulnerability Database (record CVE-2020-0979), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.