CVE-2020-1322

An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Information Disclosure Vulnerability'.

Score

CVSS 3.1 6.5 Medium

Status

Modified - secure@microsoft.com

Published

2020-06-09

Last modified

2024-08-04

Weaknesses

CWE-125, CWE-908

Affected products

• 365 Apps (Microsoft)
• Microsoft 365 Apps For Enterprise For 32-bit Systems (Microsoft)
• Microsoft 365 Apps For Enterprise For 64-bit Systems (Microsoft)
• Microsoft Office (Microsoft)
• Microsoft Project (Microsoft)
• Office (Microsoft)
• Project (Microsoft)

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1322