Vulnerability Database

313,825

Total vulnerabilities in the database

CVE-2020-1342

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.

  • Published: Jul 14, 2020
  • Updated: Nov 16, 2025
  • CVE: CVE-2020-1342
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.5
  • AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
microsoft / word 2013-sp1 2013-sp1.x
microsoft / word 2016 2016.x
microsoft / office_web_apps 2013-sp1 2013-sp1.x
microsoft / office_web_apps 2010-sp2 2010-sp2.x
microsoft / sharepoint_server 2010-sp2 2010-sp2.x
microsoft / office 2010-sp2 2010-sp2.x
microsoft / sharepoint_enterprise_server 2016 2016.x
microsoft / word 2010-sp2 2010-sp2.x
microsoft / sharepoint_enterprise_server 2013-sp1 2013-sp1.x
microsoft / sharepoint_server 2019 2019.x
microsoft / office 2019 2019.x
microsoft / office 2016 2016.x