CVE-2017-0020

CVE-2017-0020: vulnerability in Microsoft Corporation Office

Published · Updated

Follow this CVE+ Monitor Microsoft Office

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 17%
Microsoft Excel 2016, Excel 2010 SP2, Excel 2013 RT SP1, and Office Web Apps Server 2013 SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." This vulnerability is different from those described in CVE-2017-0006, CVE-2017-0019, CVE-2017-0030, CVE-2017-0031, CVE-2017-0052, and CVE-2017-0053.
Affected products
Microsoft Corporation · Office
Related CVEs — Microsoft Corporation Office

In the same product, most dangerous first.

CVE-2017-0105—CVE-2017-0105EPSS 30.6%CVE-2017-0106—CVE-2017-0106EPSS 28.4%CVE-2017-0031—CVE-2017-0031EPSS 28.1%CVE-2017-0030—CVE-2017-0030EPSS 27.8%CVE-2017-0194—CVE-2017-0194EPSS 25.5%CVE-2017-0027—CVE-2017-0027EPSS 22.7%