CVE-2020-0852

CVSS 3.1: 7.8 high
EPSS: 12%p96
Published: Mar 12, 2020 · Mar 12, 2020
Modified: Jun 17, 2026

Analyze CVE-2020-0852 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0855, CVE-2020-0892.

Vendors: microsoft

Products: office, office online server, sharepoint server

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (12.0%)

In the news

5 stories

Microsoft Patch Tuesday — March 2020: Vulnerability disclosures and Snort coverage

Cisco TalosMar 10, 17:23 UTC · Mar 10, 2020VulnerabilityCVE-2020-0796 CVE-2020-0684 CVE-2020-0801+1142 · 1 read

March 2020 Patch Tuesday: Microsoft fixes 115 vulnerabilities, Adobe none

Help Net SecurityMar 10, 00:00 UTC · Mar 10, 2020VulnerabilityExploitedCVE-2020-0852 CVE-2020-0684 CVE-2020-0872+31 · 1 read

Description · NVD

In the news

Microsoft’s Patch Tuesday updates for March 2020 fix 115 issues

Microsoft Issues March 2020 Updates to Patch 115 Security Flaws

Microsoft Patch Tuesday, March 2020 Edition

Microsoft Patch Tuesday — March 2020: Vulnerability disclosures and Snort coverage

March 2020 Patch Tuesday: Microsoft fixes 115 vulnerabilities, Adobe none