Skip to content
Sign in
CVE-2020-0980Not scored

CVE-2020-0980: Microsoft SharePoint Enterprise Server vulnerability

Microsoft · Microsoft SharePoint Enterprise Server

Affected: Microsoft SharePoint Enterprise Server · Exploitation: likely to be exploited (10% or more)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

11.8%probability of exploitation in the next 30 days
96th percentile
050100

Higher than 96% of scored CVEs

Not scored yet. The CVE record carries no CVSS score.

DescriptionCVE.org

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.

Affected products7

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Microsoft · Microsoft SharePoint Enterprise Server2016; 2013 Service Pack 1
  • Microsoft · Microsoft SharePoint Server2019; 2010 Service Pack 2
  • Microsoft · Microsoft Office2019 for 32-bit editions; 2019 for 64-bit editions; 2019 for Mac; 2016 for Mac; 2010 Service Pack 2 (32-bit editions); 2010 Service Pack 2 (64-bit editions)
  • Microsoft · Office 365 ProPlus32-bit Systems; 64-bit Systems
  • Microsoft · Microsoft Office Online ServerVersions not stated
  • Microsoft · Microsoft Word2016 (32-bit edition); 2016 (64-bit edition); 2010 Service Pack 2 (32-bit editions); 2010 Service Pack 2 (64-bit editions); 2013 RT Service Pack 1; 2013 Service Pack 1 (32-bit editions) and 1 more
  • Microsoft · Microsoft Office Web Apps2010 Service Pack 2; 2013 Service Pack 1

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Likely to be exploited (10% or more). EPSS gives it a 10% or higher chance of exploitation in the next 30 days.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
Microsoft
Published
April 2020

CoverageNo articles yet

No CyberSIXT article names CVE-2020-0980 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

Updated AboutDevelopersSign in