CVE-2020-1502 Microsoft Word Information Disclosure Vulnerability

🗓️ 17 Aug 2020 19:13:17Reported by microsoftType

Microsoft Word Information Disclosure Vulnerability CVE-2020-150

Reporter	Title	Published	Views	Family All 23
Information Security Automation	Microsoft Patch Tuesday August 2020: vulnerabilities with Detected Exploitation, useful for phishing and others	30 Aug 202022:13	–	avleonov
BDU FSTEC	Vulnerabilities of Microsoft Office, Microsoft Office Online Server, and SharePoint Server, related to errors in memory object processing, allow attackers to disclose protected information.	9 Sep 202000:00	–	bdu_fstec
CVE	CVE-2020-1502	17 Aug 202019:13	–	cve
Microsoft KB	Description of the security update for Office Online Server : August 11, 2020	11 Aug 202007:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2019 Language Pack: August 11, 2020	11 Aug 202007:00	–	mskb
Microsoft KB	Description of the security update for SharePoint Server 2019: August 11, 2020	11 Aug 202007:00	–	mskb
Kaspersky	KLA11932 Multiple vulnerabilities in Microsoft Office	11 Aug 202000:00	–	kaspersky
Microsoft CVE	Microsoft Word Information Disclosure Vulnerability	11 Aug 202007:00	–	mscve
NCSC	Vulnerabilities fixed in Microsoft Office products	11 Aug 202000:00	–	ncsc
NVD	CVE-2020-1502	17 Aug 202019:15	–	nvd

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft SharePoint Server 2019",
    "cpes": [
      "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.0",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office 2019",
    "cpes": [
      "cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "19.0.0",
        "lessThan": "https://aka.ms/OfficeSecurityReleases",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Office Online Server",
    "cpes": [
      "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "16.0.1",
        "lessThan": "publication",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft 365 Apps for Enterprise",
    "cpes": [
      "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*"
    ],
    "platforms": [
      "32-bit Systems",
      "x64-based Systems"
    ],
    "versions": [
      {
        "version": "16.0.1",
        "lessThan": "https://aka.ms/OfficeSecurityReleases",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1502

29 May 2024 16:33Current

6.8Medium risk

Vulners AI Score6.8

EPSS0.25017