What is CVE-2020-0650?

CVE-2020-0650 is a high-severity remote code execution vulnerability in Microsoft Excel. It occurs when the software fails to handle objects in memory properly, allowing attackers to run arbitrary code in the context of the current user. This affects various versions of Microsoft Excel, Microsoft Office, and Office 365 ProPlus on both 32-bit and 64-bit systems. Users need to be aware of this vulnerability and take precautions to protect their systems.

Who is impacted by CVE-2020-0650?

CVE-2020-0650 affects users of Microsoft Excel, specifically those using Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2013 SP1 (RT), Microsoft Excel 2016, Microsoft Excel 2016 (macOS), Microsoft Excel 2019, Microsoft Excel 2019 (macOS), and Microsoft Office 365 ProPlus. This vulnerability allows attackers to run arbitrary code in the context of the current user.

What to do if CVE-2020-0650 affected you

If you're affected by the CVE-2020-0650 vulnerability, it's important to take action to protect your system. Follow these simple steps:

1. Update your Microsoft Excel software to the latest version.

2. Ensure you have the security update that corrects the handling of objects in memory.

By taking these steps, you can help safeguard your system against potential attacks exploiting this vulnerability.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2020-0650 vulnerability, also known as Microsoft Excel Remote Code Execution Vulnerability, is not listed in CISA's Known Exploited Vulnerabilities Catalog. It was published on January 14, 2020. To protect your system, apply the security update provided by Microsoft, which corrects how Excel handles objects in memory.

Weakness Enumeration

The weakness enumeration for this vulnerability is "Insufficient Information," indicating a lack of specific details about the vulnerability and its mitigation.

Learn More

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and affected software configurations, refer to the NVD page or the sources listed below.

• Microsoft Security Guidance Advisory

• CVE Record