CVE-2020-1503 is an information disclosure vulnerability in Microsoft Word that allows an attacker to improperly disclose memory contents, potentially compromising user data or the computer. It affects various Microsoft Office and SharePoint products. The vulnerability has a CVSS score of 5.5 (Medium), requiring user interaction to open a specially crafted document and knowledge of specific memory addresses. While not actively exploited (KEV: No), it has a high FAUCET Risk Score of 85/100 and has garnered some community and media attention, though no public exploit code (Metasploit, Nuclei, ExploitDB) is available.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:* | ||
2010CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:* | ||
2016CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2016:*:*:*:*:macos:*:* | ||
2019CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:* | ||
2019CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.