CVE-2020-1322

EPSS 5.5%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 5.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

09 Jun 2020Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Information Disclosure Vulnerability'.

Affected products

Microsoft · Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft · Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft · Microsoft Office Microsoft · Microsoft Project

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1322