CVE-2020-17064

Description

Microsoft Excel Remote Code Execution Vulnerability

Risk Information

Base Score
7.7
MODERATE
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
EPSS Score
Exploitation Probability
13.831

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Office Web Apps Server 2013 (KB4486727)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2010 (KB4486743) 64-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2010 (KB4486743) 32-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2016 (KB4486718) 32-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2016 (KB4486718) 64-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2013 (KB4486734) 64-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Excel 2013 (KB4486734) 32-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Office 2010 (KB4486737) 64-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Office 2010 (KB4486737) 32-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Office 2013 (KB4486725) 32-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Office 2013 (KB4486725) 64-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Office 2016 (KB4486722) 64-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft Office 2016 (KB4486722) 32-Bit EditionWindows
Microsoft Excel Remote Code Execution Vulnerability for Office 2019 for x86 1808 of version(10368.20035)Windows
Microsoft Excel Remote Code Execution Vulnerability for Office 2019 x64 1808 (Build:10368.20035)Windows
Microsoft Excel Remote Code Execution Vulnerability for Office 2019 for x64 1808 of version(10368.20035)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Channel for x64 2002 of version(12527.21330)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Channel for x86 2002 of version(12527.21330)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Semi Annual Channel for x64 2002 of version(12527.21330)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Semi Annual Channel for x86 2002 of version(12527.21330)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi-Annual Channel Version 2002 (Build 12527.21330)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x64 2008 of version(13127.20760)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x86 2008 of version(13127.20760)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Targeted Channel Version 2008 (Build 13127.20760)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Current Channel for x64 2010 of version(13328.20356)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Current Channel for x86 2010 of version(13328.20356)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Current Channel for x64 2010 of version(13328.20356)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft 365 Apps for Business Current Channel for x86 2010 of version(13328.20356)Windows
Microsoft Excel Remote Code Execution Vulnerability for Microsoft 365 Apps for Enterprise Current Channel Version 2010 (Build 13328.20356)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-30332Security Update for Microsoft Office Web Apps Server 2013 (KB4486727)
PATCH-30317Security Update for Microsoft Excel 2010 (KB4486743) 64-Bit Edition
PATCH-30318Security Update for Microsoft Excel 2010 (KB4486743) 32-Bit Edition
PATCH-30339Security Update for Microsoft Excel 2016 (KB4486718) 32-Bit Edition
PATCH-30342Security Update for Microsoft Excel 2016 (KB4486718) 64-Bit Edition
PATCH-30329Security Update for Microsoft Excel 2013 (KB4486734) 64-Bit Edition
PATCH-30331Security Update for Microsoft Excel 2013 (KB4486734) 32-Bit Edition
PATCH-30336Security Update for Microsoft Office 2013 (KB4486725) 32-Bit Edition
PATCH-30338Security Update for Microsoft Office 2013 (KB4486725) 64-Bit Edition
PATCH-30340Security Update for Microsoft Office 2016 (KB4486722) 64-Bit Edition
PATCH-30345Security Update for Microsoft Office 2016 (KB4486722) 32-Bit Edition
PATCH-30359Update for Office 2019 for x86 1808 of version(10368.20035)
PATCH-30360Office 2016 Deployment Tool for Office 2019 x64 1808 (Build:10368.20035)
PATCH-30361Update for Office 2019 for x64 1808 of version(10368.20035)
PATCH-30363Update for Microsoft 365 Apps for Enterprise Semi Annual Channel for x64 2002 of version(12527.21330)
PATCH-30365Update for Microsoft 365 Apps for Enterprise Semi Annual Channel for x86 2002 of version(12527.21330)
PATCH-30367Update for Microsoft 365 Apps for Business Semi Annual Channel for x64 2002 of version(12527.21330)
PATCH-30369Update for Microsoft 365 Apps for Business Semi Annual Channel for x86 2002 of version(12527.21330)
PATCH-30374Update for Microsoft 365 Apps for Enterprise Semi-Annual Channel Version 2002 (Build 12527.21330)
PATCH-30371Update for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x64 2008 of version(13127.20760)
PATCH-30373Update for Microsoft 365 Apps for Enterprise Semi Annual Targeted Channel for x86 2008 of version(13127.20760)
PATCH-30375Update for Microsoft 365 Apps for Enterprise Targeted Channel Version 2008 (Build 13127.20760)
PATCH-30351Update for Microsoft 365 Apps for Enterprise Current Channel for x64 2010 of version(13328.20356)
PATCH-30353Update for Microsoft 365 Apps for Enterprise Current Channel for x86 2010 of version(13328.20356)
PATCH-30355Update for Microsoft 365 Apps for Business Current Channel for x64 2010 of version(13328.20356)
PATCH-30357Update for Microsoft 365 Apps for Business Current Channel for x86 2010 of version(13328.20356)
PATCH-30376Update for Microsoft 365 Apps for Enterprise Current Channel Version 2010 (Build 13328.20356)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234