Read the docs
TI-2020-00672 Aliases CVE-2020-0697GHSA-2cgq-hh5m-vc66

An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat…

Priority LOW 36Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

An elevation of privilege vulnerability exists in Microsoft Office OLicenseHeartbeat task, where an attacker who successfully exploited this vulnerability could run this task as SYSTEM.To exploit the vulnerability, an authenticated attacker would need to place a specially crafted file in a specific location, thereby allowing arbitrary file corruption.The security update addresses the vulnerability by correcting how the process validates the log file., aka 'Microsoft Office Tampering Vulnerability'.

Why it matters now

EPSS 0.00903 59th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
MicrosoftOffice 365 ProPlus32-bit Systems; 64-bit Systems—No fix listedCNA
  • Office 365 ProPlus VendorMicrosoft Affected 32-bit Systems; 64-bit Systems Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
  • cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-0697
  2. 2026-10-03 Alias added: GHSA-2cgq-hh5m-vc66

References

Patch 1

  • TI-2019-01013 A remote code execution vulnerability exists in Microsoft Excel software when the… KEVCVSS 3.1HIGH 8.8
  • TI-2019-00335 Command injection in Microsoft Office KEVCVSS 3.1HIGH 8.8
  • TI-2019-00377 A remote code execution vulnerability exists in Microsoft Word software when it fails to… CVSS 3.0HIGH 8.8
  • TI-2019-01151 A remote code execution vulnerability exists in Microsoft Excel software when the… CVSS 3.1HIGH 7.8
  • TI-2019-01045 A remote code execution vulnerability exists in Microsoft Excel software when the… CVSS 3.1HIGH 8.8
  • TI-2018-06240 A remote code execution vulnerability exists in Microsoft Outlook software when it fails… CVSS 3.0HIGH 7.8
See all 83 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences