Vulnerability Description
An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would need to already have the ability to execute code on the system. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The security update addresses the vulnerability by correcting how Microsoft Office Click-to-Run (C2R) components handle objects in memory.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | 365 Apps | - |
| Microsoft | Office | 2013 |
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1581PatchVendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1581PatchVendor Advisory
FAQ
What is CVE-2020-1581?
CVE-2020-1581 is a vulnerability with a CVSS score of 7.8 (HIGH). An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle objects in memory. An attacker who successfully exploited the vulnerability could e...
How severe is CVE-2020-1581?
CVE-2020-1581 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-1581?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft 365 Apps, Microsoft Office.