CVE-2020-1226

—

CVSS 3.1

8.8 high

EPSS

17%p97

Published

Jun 9, 2020 (Jun 9, 2020)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1225.

Vendors: microsoft
Products: 365 apps, excel, office
Weakness: CWE-416
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (17.1%)

In the news3 stories

Microsoft Patch Tuesday, June 2020 Edition

Krebs on SecurityJun 15, 00:00 UTC · Jun 15, 2020Vulnerability in the wildCVE-2020-1301 CVE-2020-0796 CVE-2020-1225+2 CVEs

Vulnerability Spotlight: Two code execution vulnerabilities in Microsoft Excel

Cisco TalosJun 10, 20:21 UTC · Jun 10, 2020Vulnerability in the wildCVE-2020-1226 CVE-2020-12251

Microsoft Patch Tuesday for June 2020 — Snort rules and prominent vulnerabilities

Cisco TalosJun 10, 00:49 UTC · Jun 10, 2020Vulnerability in the wildCVE-2020-1248 CVE-2020-1225 CVE-2020-1226+2 CVEs