5.5
Medium
CVE-2020-16855 An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an…
Description
<p>An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory. An attacker who successfully exploited the vulnerability could view out of bound memory.</p> <p>Exploitation of the vulnerability requires that a user open a specially crafted file with an affected version of Microsoft Office software.</p> <p>The security update addresses the vulnerability by properly initializing the affected variable.</p>
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Office 2019 for Mac 16.0 | 16.0.0 → latest | No fix stated |
| Microsoft Office 2016 for Mac 16.0 | 16.0.0 → latest | No fix stated |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Office 2019 for Mac
The 89 CVEs of Microsoft Office 2019 for Mac →
CVE-2023-36565
Microsoft Office Graphics Elevation of Privilege Vulnerability
7.0
High
CVE-2023-36762
Microsoft Word Remote Code Execution Vulnerability
7.3
High
CVE-2023-36767
Microsoft Office Security Feature Bypass Vulnerability
4.3
Medium
CVE-2023-36766
Microsoft Excel Information Disclosure Vulnerability
7.8
High