CVE-2020-1322: 
vulnerability analysis and mitigation

An information disclosure vulnerability (CVE-2020-1322) was identified in Microsoft Project that occurs when the software reads out-of-bound memory due to an uninitialized variable. This vulnerability was disclosed and addressed in June 2020, affecting Microsoft Project 2013 and related versions (NVD, CVE Mitre).

The vulnerability stems from Microsoft Project's handling of uninitialized variables, which can lead to out-of-bound memory reads. This technical flaw could potentially expose sensitive information stored in the system's memory (Microsoft Support).

The exploitation of this vulnerability could result in unauthorized disclosure of memory contents, potentially exposing sensitive information stored in the system's memory (Microsoft Support).

Microsoft released security update 4484369 to address this vulnerability. The update is available through Microsoft Update, Microsoft Update Catalog, and as a standalone package through the Microsoft Download Center. Users must have Service Pack 1 for Microsoft Office 2013 installed before applying this security update (Microsoft Support).