CVE-2020-0892

—

CVSS 3.1

7.8 high

EPSS

12%p96

Published

Mar 12, 2020 (Mar 12, 2020)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0850, CVE-2020-0851, CVE-2020-0852, CVE-2020-0855.

Vendors: microsoft
Products: office, office 365 proplus, office online server, office web apps, sharepoint enterprise server, sharepoint foundation, sharepoint server, word
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (11.8%)

In the news1 stories

Microsoft Patch Tuesday — March 2020: Vulnerability disclosures and Snort coverage

Cisco TalosMar 10, 17:23 UTC · Mar 10, 2020Vulnerability CVE-2020-0796 CVE-2020-0684 CVE-2020-0801+114 CVEs