CVE-2020-0852

—

CVSS 3.1

7.8 high

EPSS

12%p96

Published

Mar 12, 2020 (Mar 12, 2020)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0855, CVE-2020-0892.

Vendors: microsoft
Products: office, office online server, sharepoint server
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (12.0%)

In the news5 stories

Microsoft Patch Tuesday — March 2020: Vulnerability disclosures and Snort coverage

Cisco TalosMar 10, 17:23 UTC · Mar 10, 2020Vulnerability CVE-2020-0796 CVE-2020-0684 CVE-2020-0801+114 CVEs

March 2020 Patch Tuesday: Microsoft fixes 115 vulnerabilities, Adobe none

Help Net SecurityMar 10, 00:00 UTC · Mar 10, 2020Vulnerability in the wildCVE-2020-0852 CVE-2020-0684 CVE-2020-0872+3 CVEs

CVE-2020-0852

In the news5 stories

Microsoft’s Patch Tuesday updates for March 2020 fix 115 issues

Microsoft Issues March 2020 Updates to Patch 115 Security Flaws

Microsoft Patch Tuesday, March 2020 Edition

Microsoft Patch Tuesday — March 2020: Vulnerability disclosures and Snort coverage

March 2020 Patch Tuesday: Microsoft fixes 115 vulnerabilities, Adobe none