Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2020-1503— Microsoft Word Information Disclosure Vulnerability

Quick assessment

Affected

Microsoft Microsoft SharePoint Enterprise Server 2016

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Office等都是美国微软（Microsoft）公司的产品。Microsoft Office是一款办公软件套件产品。Microsoft SharePoint是一套企业业务协作平台。Microsoft Word是一套Office套件中的文字处理软件。 Microsoft Word中存在信息泄露漏洞。攻击者可借助特制文件利用该漏洞入侵用户计算机或数据。以下产品及版本受到影响：Microsoft 365 Apps for Enterprise，Office 2010 SP2，Office 2

AI Predicted 6.5 Difficulty: Moderate EPSS 4.55% · P91 Updated Feb 24, 2026

Possible ATT&CK Techniques 2 AI

T1059 · Command and Scripting Interpreter T1203 · Exploitation for Client Execution

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2020-1503

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Microsoft Word Information Disclosure Vulnerability

Source: CVE Program / CVE List V5

Vulnerability Description

An information disclosure vulnerability exists when Microsoft Word improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data. To exploit the vulnerability, an attacker could craft a special document file and then convince the user to open it. An attacker must know the memory address location where the object was created. The update addresses the vulnerability by changing the way certain Word functions handle objects in memory.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Microsoft Word 信息泄露漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE
Microsoft	Microsoft SharePoint Enterprise Server 2016	16.0.0 ~ publication	`cpe:2.3:a:microsoft:sharepoint_server:2016::::enterprise:::`
Microsoft	Microsoft SharePoint Enterprise Server 2013 Service Pack 1	15.0.0 ~ publication	`cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:::enterprise:::*`
Microsoft	Microsoft SharePoint Server 2019	16.0.0 ~ publication	`cpe:2.3:a:microsoft:sharepoint_server:2019:::::::*`
Microsoft	Microsoft Office 2019	19.0.0 ~ https://aka.ms/OfficeSecurityReleases	`cpe:2.3:a:microsoft:office:2019:::::::*`
Microsoft	Microsoft Office 2019 for Mac	16.0.0 ~ publication	`cpe:2.3:a:microsoft:office:2019:::::macos::`
Microsoft	Microsoft Office Online Server	16.0.1 ~ publication	`cpe:2.3:a:microsoft:office_online_server:-:::::::*`
Microsoft	Microsoft 365 Apps for Enterprise	16.0.1 ~ https://aka.ms/OfficeSecurityReleases	`cpe:2.3:a:microsoft:365_apps:-::::enterprise:::`
Microsoft	Microsoft Word 2016	16.0.1 ~ publication	`cpe:2.3:a:microsoft:word:2016:::::::*`
Microsoft	Microsoft Office 2016 for Mac	16.0.0 ~ publication	`cpe:2.3:a:microsoft:office:2016:::::mac_os::`
Microsoft	Microsoft Office 2010 Service Pack 2	13.0.0.0 ~ publication	`cpe:2.3:a:microsoft:excel:2010:sp2::::::`
Microsoft	Microsoft Office Web Apps 2010 Service Pack 2	13.0.0 ~ publication	`cpe:2.3:a:microsoft:office_web_apps:2010:sp2::::::`
Microsoft	Microsoft Office Web Apps 2013 Service Pack 1	15.0.0.0 ~ publication	`cpe:2.3:a:microsoft:office_web_apps:2013:sp1::::::`
Microsoft	Microsoft SharePoint Server 2010 Service Pack 2	13.0.0.0 ~ publication	`cpe:2.3:a:microsoft:sharepoint_server:2010:sp2::::::`
Microsoft	Microsoft Word 2010 Service Pack 2	13.0.0.0 ~ publication	`cpe:2.3:a:microsoft:word:2010:sp2::::::`
Microsoft	Microsoft Word 2013 Service Pack 1	15.0.1 ~ publication	`cpe:2.3:a:microsoft:word:2013:sp1::::::`
Microsoft	Microsoft Word 2013 Service Pack 1	15.0.1 ~ publication	`cpe:2.3:a:microsoft:word:2013:sp1::::::`

II. Public POCs for CVE-2020-1503

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2020-1503

请登录查看更多情报信息。

Vendor Advisories for CVE-2020-1503 (1)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1503 x_refsource_MISC

https://www.cve.org/CVERecord?id=CVE-2020-1503

Same Patch Batch · Microsoft · 2020-08-17 · 121 CVEs total

CVE-2020-1467	10.0 CRITICAL	Windows Hard Link Elevation of Privilege Vulnerability
CVE-2020-1583	8.8 HIGH	Microsoft Word Information Disclosure Vulnerability
CVE-2020-1504	8.8 HIGH	Microsoft Excel Remote Code Execution Vulnerability
CVE-2020-1552	8.0 HIGH	Windows Work Folder Service Elevation of Privilege Vulnerability
CVE-2020-1521	7.8 HIGH	Windows Speech Runtime Elevation of Privilege Vulnerability
CVE-2020-1534	7.8 HIGH	Windows Backup Service Elevation of Privilege Vulnerability
CVE-2020-1533	7.8 HIGH	Windows WalletService Elevation of Privilege Vulnerability
CVE-2020-1531	7.8 HIGH	Windows Accounts Control Elevation of Privilege Vulnerability
CVE-2020-1530	7.8 HIGH	Windows Remote Access Elevation of Privilege Vulnerability
CVE-2020-1529	7.8 HIGH	Windows GDI Elevation of Privilege Vulnerability
CVE-2020-1528	7.8 HIGH	Windows Radio Manager API Elevation of Privilege Vulnerability
CVE-2020-1527	7.8 HIGH	Windows Custom Protocol Engine Elevation of Privilege Vulnerability
CVE-2020-1526	7.8 HIGH	Windows Network Connection Broker Elevation of Privilege Vulnerability
CVE-2020-1525	7.8 HIGH	Media Foundation Memory Corruption Vulnerability
CVE-2020-1524	7.8 HIGH	Windows Speech Shell Components Elevation of Privilege Vulnerability
CVE-2020-1513	7.8 HIGH	Windows CSC Service Elevation of Privilege Vulnerability
CVE-2020-1516	7.8 HIGH	Windows Work Folders Service Elevation of Privilege Vulnerability
CVE-2020-1515	7.8 HIGH	Windows Telephony Server Elevation of Privilege Vulnerability
CVE-2020-1517	7.8 HIGH	Windows File Server Resource Management Service Elevation of Privilege Vulnerability
CVE-2020-1512	7.8 HIGH	Windows State Repository Service Information Disclosure Vulnerability

Showing top 20 of 121 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Microsoft SharePoint Enterprise Server 2016

Same vendor: Microsoft

V. Comments for CVE-2020-1503

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2020-1503— Microsoft Word Information Disclosure Vulnerability

Quick assessment

Possible ATT&CK Techniques 2 AI

I. Basic Information for CVE-2020-1503

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2020-1503

III. Intelligence Information for CVE-2020-1503

Vendor Advisories for CVE-2020-1503 (1)

Same Patch Batch · Microsoft · 2020-08-17 · 121 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2020-1503

Leave a comment