CVE-2020-1225

CVSS 3.1: 8.8 high
EPSS: 17%p97
Published: Jun 9, 2020 · Jun 9, 2020
Modified: Jun 17, 2026

Analyze CVE-2020-1225 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1226.

Vendors: microsoft

Products: 365 apps, excel, office

Weakness: CWE-416

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (17.1%)

In the news

3 stories

Microsoft Patch Tuesday, June 2020 Edition

Krebs on SecurityJun 15, 00:00 UTC · Jun 15, 2020VulnerabilityExploitedCVE-2020-1301 CVE-2020-0796 CVE-2020-1225+22 · 1 read

Vulnerability Spotlight: Two code execution vulnerabilities in Microsoft Excel

Cisco TalosJun 10, 20:21 UTC · Jun 10, 2020VulnerabilityExploitedCVE-2020-1226 CVE-2020-12253 · 1 read

Microsoft Patch Tuesday for June 2020 — Snort rules and prominent vulnerabilities

Cisco TalosJun 10, 00:49 UTC · Jun 10, 2020VulnerabilityExploitedCVE-2020-1248 CVE-2020-1225 CVE-2020-1226+22 · 1 read