Description

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-1446, CVE-2020-1447.

Remediation

References

CVE-2020-1448

Related Vulnerabilities

WebLogic CVE-2008-2579 Vulnerability (CVE-2008-2579)

Django Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2021-45452)

PHP Improper Encoding or Escaping of Output Vulnerability (CVE-2024-1874)

Oracle Database Server Uncontrolled Resource Consumption Vulnerability (CVE-2026-46834)

WordPress Plugin Event List SQL Injection (0.7.8)

Severity

High

Classification

CVE-2020-1448 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities