CVE-2020-1322: Medium severity microsoft 365 apps for enterprise vulnerability

Published Jun 9, 2020

Updated

An information disclosure vulnerability exists when Microsoft Project reads out of bound memory due to an uninitialized variable, aka 'Microsoft Project Information Disclosure Vulnerability'.

Affected Software

5 affected components

Microsoft 365 Apps

Microsoft Office=2019

Microsoft Project=2010-sp2

Microsoft Project=2013-sp1

Microsoft Project=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1322

Event History

Jun 9, 2020

CVE Published

via MITRE·07:44 PM

Data Sourced

via MITRE·07:44 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-1322?

CVE-2020-1322 refers to an information disclosure vulnerability in Microsoft Project.

What is the severity of CVE-2020-1322?

CVE-2020-1322 has a severity rating of 6.5 out of 10, which is considered medium.

Which software is affected by CVE-2020-1322?

CVE-2020-1322 affects Microsoft Office LTSC for Mac 2021, Microsoft Office 2019, and various versions of Microsoft Project.

How can I fix CVE-2020-1322?

To mitigate CVE-2020-1322, it is recommended to apply the latest security updates provided by Microsoft.

Where can I find more information about CVE-2020-1322?

You can find more information about CVE-2020-1322 on the Microsoft Security Guidance Advisory page: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1322