Skip to content
fr Sign in
Not rated

CVE-2020-1581 An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle…

Description

An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) components handle objects in memory. An attacker who successfully exploited the vulnerability could elevate privileges. The attacker would need to already have the ability to execute code on the system. An attacker could exploit this vulnerability by running a specially crafted application on the victim system. The security update addresses the vulnerability by correcting how Microsoft Office Click-to-Run (C2R) components handle objects in memory.

Affected products and versions

Product Affected versions Fixed in
Microsoft Office 2013 Click-to-Run (C2R) 15.0 15.0.0.0 → < 15.0.5571.1000 15.0.5571.1000
Microsoft Office 2019 19.0 19.0.0 → latest No fix stated
Microsoft 365 Apps for Enterprise 16.0 16.0.1 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Microsoft Office 2013 Click-to-Run (C2R)

The 6 CVEs of Microsoft Office 2013 Click-to-Run (C2R) →
CVE-2023-33148 Microsoft Office Elevation of Privilege Vulnerability 7.8 High CVE-2022-22004 Microsoft Office ClickToRun Remote Code Execution Vulnerability 7.8 High CVE-2020-16955 An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles… 7.8 High CVE-2020-16934 An elevation of privilege vulnerability exists in the way that Microsoft Office Click-to-Run (C2R) AppVLP handles… 7.0 High
Track this CVE