CVE-2020-1502

CVE-2020-1502 is an information-disclosure vulnerability in Microsoft Word where memory contents can be exposed due to how Word handles objects in memory. An attacker could lure a user to open a specially crafted document, potentially revealing memory contents needed to compromise data. The explo...

CVE-2020-1502 Microsoft Word Information Disclosure Vulnerability

...

Security Updates for Microsoft Office Online Server and Microsoft Office Web Apps (August 2020)

The Microsoft Office Online Server or Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly hand...