CVE-2020-0650

HIGH EXPLOITED RANSOMWARE

Microsoft Excel - Remote Code Execution

Title source: llm

Exploitation Summary

CVE-2020-0650 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns.

Description

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0651, CVE-2020-0653.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0650

Scores

CVSS v3 7.8

EPSS 0.1717

EPSS Percentile 96.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2020-01-22

Ransomware Use Confirmed

Status published

Products (5)

microsoft/excel 2010 sp2

microsoft/excel 2013 sp1 (2 CPE variants)

microsoft/excel 2016 (2 CPE variants)

microsoft/excel 2019 (2 CPE variants)

microsoft/office_365_proplus

Published Jan 14, 2020

Tracked Since Feb 18, 2026