{"id":"CVE-2020-1342","aliases":["EUVD-2020-12218","GHSA-mhm7-fjjw-2fgr"],"status":"published","title":"An information disclosure vulnerability exists when Microsoft Office software reads out of bound...","description":"An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.06411,"percentile":0.93734,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-125","CWE-908"],"published":"2020-07-14T22:54:04Z","modified":"2026-06-17T03:01:09Z","products":[{"vendor":"microsoft","product":"365_apps"},{"vendor":"microsoft","product":"microsoft 365 apps for enterprise for 32-bit systems"},{"vendor":"microsoft","product":"microsoft 365 apps for enterprise for 64-bit systems"},{"vendor":"microsoft","product":"microsoft office"},{"vendor":"microsoft","product":"microsoft office online server"},{"vendor":"microsoft","product":"microsoft office web apps"},{"vendor":"microsoft","product":"microsoft sharepoint enterprise server"},{"vendor":"microsoft","product":"microsoft sharepoint server"},{"vendor":"microsoft","product":"microsoft word"},{"vendor":"microsoft","product":"office"},{"vendor":"microsoft","product":"office_online_server"},{"vendor":"microsoft","product":"office_web_apps"},{"vendor":"microsoft","product":"sharepoint_enterprise_server"},{"vendor":"microsoft","product":"sharepoint_server"},{"vendor":"microsoft","product":"word"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1342","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-1342"},{"url":"https://github.com/advisories/GHSA-mhm7-fjjw-2fgr"}],"sources":{"cve":[{"id":"CVE-2020-1342","description":"An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.","status":"published","published":"2020-07-14T22:54:04Z","modified":"2024-08-04T06:32:01.184Z","updated_at":"2026-11-02T14:35:56.213477Z"}],"euvd":[{"id":"EUVD-2020-12218","description":"An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.","status":"published","published":"2020-07-14T22:54:04Z","modified":"2024-08-04T06:32:01Z","updated_at":"2026-11-03T03:08:13.874945Z"}],"ghsa":[{"id":"GHSA-mhm7-fjjw-2fgr","title":"An information disclosure vulnerability exists when Microsoft Office software reads out of bound...","description":"An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.","status":"published","published":"2022-05-24T17:22:58Z","modified":"2023-01-29T05:03:09Z","cwes":["CWE-908"],"updated_at":"2026-11-02T14:45:15.626641Z"}],"nvd":[{"id":"CVE-2020-1342","description":"An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka 'Microsoft Office Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2020-1445.","status":"published","published":"2020-07-14T23:15:12.713Z","modified":"2026-06-17T03:01:09.083Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-125","CWE-908"],"updated_at":"2026-11-02T14:06:09.126752Z"}]}}