CVE-2020-17118

—

CVSS 3.1

8.1 high

EPSS

4%p89

Published

Dec 10, 2020 (Dec 10, 2020)

Modified

Jun 17, 2026

Description

Microsoft SharePoint Remote Code Execution Vulnerability

Vendors: microsoft
Products: sharepoint foundation, sharepoint server
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (3.8%)

In the news3 stories

Microsoft December 2020 Patch Tuesday fixes 58 bugs, 9 are critical

Security AffairsDec 9, 08:50 UTC · Dec 9, 2020Vulnerability in the wildCVE-2020-17132 CVE-2020-17121 CVE-2020-17095+2 CVEs

60

Microsoft Releases Windows Update (Dec 2020) to Fix 58 Security Flaws

The Hacker NewsDec 9, 04:58 UTC · Dec 9, 2020Exploit / PoC in the wildCVE-2020-17132 CVE-2020-17118 CVE-2020-17121+4 CVEs

60

Microsoft Patch Tuesday (Dec. 2020) — Snort rules and notable vulnerabilities

Cisco TalosDec 8, 18:49 UTC · Dec 8, 2020Vulnerability in the wildCVE-2020-17118 CVE-2020-17096 CVE-2020-17117

60