CVE-2020-1502

CVE-2020-1502 is an information disclosure vulnerability in Microsoft Word, affecting Microsoft 365 Apps, Office, Office Online Server, and SharePoint Server. An attacker could exploit this by crafting a malicious document that, when opened, improperly discloses memory contents. This is a medium-severity vulnerability (CVSS 5.5) requiring user interaction and knowledge of memory addresses, with a high impact on confidentiality. While it has a high FAUCET Risk Score, there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and limited community discussion or media coverage beyond its initial disclosure.