Vulnerability · NVD

CVE-2020-1223

CVE-2020-1223, high severity (CVSS 8.8): 1 tracked app concerned, all fixed or indeterminable on their current version.

Severity (CVSS): 8.8
Exploitation: 8.0 %
Tracked apps: 1
Still exposed: 0

Published on 2020-06-09

A remote code execution vulnerability exists when Microsoft Word for Android fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file.The update addresses the vulnerability by correcting how Microsoft Word for Android handles specially crafted URL files., aka 'Word for Android Remote Code Execution Vulnerability'.

Attack vector : Network No privileges required

Show raw CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS 8.05% above median percentile 94.6%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Microsoft Word Android com.microsoft.office.word

Affected - Fixed in - Latest tracked 16.0.20430.20032 undetermined

Vulnerable CPE configurations (1)

Vendor	Product	Platform	Versions	CPE 2.3 URI
microsoft	word Android	Android	-	cpe:2.3:a:microsoft:word:-:::::android::

View on NVD ↗ Advisory · portal.msrc.microsoft.com

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM