CVE-2020-1502— Microsoft Word Information Disclosure Vulnerability
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-1502
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Microsoft Word Information Disclosure Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special document file and then convince the user to open it. An attacker must know the memory address location where the object was created. The update addresses the vulnerability by changing the way certain Word functions handle objects in memory.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Word 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Office等都是美国微软（Microsoft）公司的产品。Microsoft Office是一款办公软件套件产品。Microsoft SharePoint是一套企业业务协作平台。Microsoft Word是一套Office套件中的文字处理软件。 Microsoft Word中存在信息泄露漏洞。攻击者可借助特制文件利用该漏洞入侵用户计算机或数据。以下产品及版本受到影响：Microsoft 365 Apps for Enterprise，Office 2019，Office Onlin
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Microsoft SharePoint Server 2019 | 16.0.0 ~ publication | cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:* | |
| Microsoft | Microsoft Office 2019 | 19.0.0 ~ https://aka.ms/OfficeSecurityReleases | cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:* | |
| Microsoft | Microsoft Office Online Server | 16.0.1 ~ publication | cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:* | |
| Microsoft | Microsoft 365 Apps for Enterprise | 16.0.1 ~ https://aka.ms/OfficeSecurityReleases | cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:* |
II. Public POCs for CVE-2020-1502
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-1502
请登录查看更多情报信息。
Same Patch Batch · Microsoft · 2020-08-17 · 121 CVEs total
| CVE-2020-1467 | 10.0 CRITICAL | Windows Hard Link Elevation of Privilege Vulnerability |
| CVE-2020-1583 | 8.8 HIGH | Microsoft Word Information Disclosure Vulnerability |
| CVE-2020-1504 | 8.8 HIGH | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2020-1552 | 8.0 HIGH | Windows Work Folder Service Elevation of Privilege Vulnerability |
| CVE-2020-1521 | 7.8 HIGH | Windows Speech Runtime Elevation of Privilege Vulnerability |
| CVE-2020-1534 | 7.8 HIGH | Windows Backup Service Elevation of Privilege Vulnerability |
| CVE-2020-1533 | 7.8 HIGH | Windows WalletService Elevation of Privilege Vulnerability |
| CVE-2020-1531 | 7.8 HIGH | Windows Accounts Control Elevation of Privilege Vulnerability |
| CVE-2020-1530 | 7.8 HIGH | Windows Remote Access Elevation of Privilege Vulnerability |
| CVE-2020-1529 | 7.8 HIGH | Windows GDI Elevation of Privilege Vulnerability |
| CVE-2020-1528 | 7.8 HIGH | Windows Radio Manager API Elevation of Privilege Vulnerability |
| CVE-2020-1527 | 7.8 HIGH | Windows Custom Protocol Engine Elevation of Privilege Vulnerability |
| CVE-2020-1526 | 7.8 HIGH | Windows Network Connection Broker Elevation of Privilege Vulnerability |
| CVE-2020-1525 | 7.8 HIGH | Media Foundation Memory Corruption Vulnerability |
| CVE-2020-1524 | 7.8 HIGH | Windows Speech Shell Components Elevation of Privilege Vulnerability |
| CVE-2020-1513 | 7.8 HIGH | Windows CSC Service Elevation of Privilege Vulnerability |
| CVE-2020-1516 | 7.8 HIGH | Windows Work Folders Service Elevation of Privilege Vulnerability |
| CVE-2020-1515 | 7.8 HIGH | Windows Telephony Server Elevation of Privilege Vulnerability |
| CVE-2020-1517 | 7.8 HIGH | Windows File Server Resource Management Service Elevation of Privilege Vulnerability |
| CVE-2020-1512 | 7.8 HIGH | Windows State Repository Service Information Disclosure Vulnerability |
Showing top 20 of 121 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Microsoft SharePoint Server 2019
- CVE-2024-26251
Microsoft SharePoint Server Spoofing Vulnerability - CVE-2023-36891
Microsoft SharePoint Server Spoofing Vulnerability - CVE-2023-36892
Microsoft SharePoint Server Spoofing Vulnerability - CVE-2023-36890
Microsoft SharePoint Server Information Disclosure Vulnerabi - CVE-2023-33165
Microsoft SharePoint Server Security Feature Bypass Vulnerab
Same vendor: Microsoft
- CVE-2026-42826
Azure DevOps Information Disclosure Vulnerability - CVE-2026-35428
Azure Cloud Shell Spoofing Vulnerability - CVE-2026-35435
Azure AI Foundry Elevation of Privilege Vulnerability - CVE-2026-34327
Microsoft Partner Center Spoofing Vulnerability - CVE-2026-33844
Azure Managed Instance for Apache Cassandra Remote Code Exec
V. Comments for CVE-2020-1502
No comments yet