A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0651, CVE-2020-0653.

The Microsoft Excel Products are missing security updates.
It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in     Microsoft Excel software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights.  (CVE-2020-0650, CVE-2020-0651)

The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability exists when Microsoft Excel    improperly handles objects in memory. An attacker who successfully    exploited the vulnerability could run arbitrary code in the context    of the current user. To exploit the vulnerability, an attacker has to    entice the logged on user to click a link or open a specially crafted    file to gain control of the system with the priviledges of the logged    on user. (CVE-2020-0650 CVE-2020-0651)

ID	Name	Product	Family	Severity
162074	Security Updates for Microsoft Excel Products C2R (January 2020)	Nessus	Windows	high
132938	Security Updates for Microsoft Office Products (January 2020) (macOS)	Nessus	MacOS X Local Security Checks	high
132867	Security Updates for Microsoft Excel Products (January 2020)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2020-0650

high

Tenable Plugins

high

high

high