A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

The Microsoft Excel Products are missing a security update.
It is, therefore, affected by the following vulnerability :

  - A remote code execution vulnerability exists in     Microsoft Excel software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights.  (CVE-2020-0901)

The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by the following vulnerability:

  - A remote code execution vulnerability exists in     Microsoft Excel software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights.  (CVE-2020-0901)

ID	Name	Product	Family	Severity
162099	Security Updates for Microsoft Excel Products C2R (May 2020)	Nessus	Windows	critical
136559	Security Updates for Microsoft Office Products (May 2020) (macOS)	Nessus	MacOS X Local Security Checks	critical
136511	Security Updates for Microsoft Excel Products (May 2020)	Nessus	Windows : Microsoft Bulletins	critical

Detections

Analytics

CVE-2020-0901

critical

Tenable Plugins

critical

critical

critical