CVE-2020-1458

7.8 highEPSS 11%

High (7.8) in microsoft 365 apps. EPSS 11% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists when Microsoft Office improperly validates input before loading dynamic link library (DLL) files, aka 'Microsoft Office Remote Code Execution Vulnerability'.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 11% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-426
Published: 2020-07-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:365_apps

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1458
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1458

Check your stack JSON