Microsoft Excel Remote Code Execution Vulnerability

The Microsoft Office Excel installation on the remote host is missing a security update. It is, therefore, affected by an unspecified remote code execution vulnerability. An attacker can exploit this vulnerability by tricking a user into opening a specially crafted Office file.

The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by unspecified remote code execution vulnerabilities. An attacker can use a specially crafted Office file to exploit these vulnerabilities. (CVE-2020-17064, CVE-2020-17065)

ID	Name	Product	Family	Severity
162018	Security Updates for Microsoft Excel Products C2R (November 2020)	Nessus	Windows	high
142695	Security Updates for Microsoft Office Online Server and Microsoft Office Web Apps (November 2020)	Nessus	Windows : Microsoft Bulletins	high
142685	Security Updates for Microsoft Excel Products (November 2020)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2020-17065

high

Tenable Plugins

high

high

high