CVE-2020-0653

HIGH EXPLOITED RANSOMWARE

Microsoft Office 365 ProPlus - Remote Code Execution

Title source: llm

Exploitation Summary

CVE-2020-0653 has been observed exploited in the wild (reported by VulnCheck KEV), including in ransomware campaigns.

Description

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0650, CVE-2020-0651.

References (1)

Core 1

Core References

Patch, Vendor Advisory x_refsource_misc

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0653

Scores

CVSS v3 7.8

EPSS 0.2040

EPSS Percentile 97.2%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2020-01-22

Ransomware Use Confirmed

Status published

Products (1)

microsoft/office_365_proplus

Published Jan 14, 2020

Tracked Since Feb 18, 2026