CVE-2020-1456

Description

References

• it-sec.de/ger/Aktuelles-Termine/it.sec-blog/it.sec-Research-Team-findet-unbekannte-Schwachstelle-in-Microsoft-Office-SharePoint · Third Party Advisory
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1456 · Patch
• slashcrypto.org/2021/01/15/CVE-2020-1456 · Exploit

More vulnerabilities in sharepoint enterprise server

• CVE-2025-54905HIGH 7.1Untrusted pointer dereference in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53736MEDIUM 6.2Buffer over-read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
• CVE-2025-53733HIGH 8.4Incorrect conversion between numeric types in Microsoft Office Word allows an unauthorized attacker to execute code locally.
• CVE-2025-49706MEDIUM 6.5EXPLOITED (CISA KEV)Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
• CVE-2025-47994HIGH 8.6Deserialization of untrusted data in Microsoft Office allows an unauthorized attacker to elevate privileges locally.