CVE-2020-16921

<p>An information disclosure vulnerability exists in Text Services Framework when it fails to properly handle objects in memory. An attacker who successfully exploited this vulnerability could potentially read data that was not intended to be disclosed. Note that this vulnerability would not allow an attacker to execute code or to elevate their user rights directly, but it could be used to obtain information that could be used to try to further compromise the affected system.</p> <p>To exploit this vulnerability, an attacker would have to log on to an affected system and open a specially crafted file.</p> <p>The update addresses the vulnerability by correcting how Text Services Framework handles objects in memory.</p>

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16921Patch, Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16921Patch, Vendor Advisory

Published

Oct 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-16915<p>A memory corruption vulnerability exists when Windows Med…7.8
• CVE-2020-16916<p>An elevation of privilege vulnerability exists when Windo…7.8
• CVE-2020-16918<p>A remote code execution vulnerability exists when the Bas…7.8
• CVE-2020-16919<p>An information disclosure vulnerability exists when the W…5.5
• CVE-2020-1692Moodle before version 3.7.2 is vulnerable to information exp…6.5
• CVE-2020-16920<p>An elevation of privilege vulnerability exists when the W…7.8
• CVE-2020-16922<p>A spoofing vulnerability exists when Windows incorrectly …5.3
• CVE-2020-16923<p>A remote code execution vulnerability exists in the way t…7.8
• CVE-2020-16924<p>A remote code execution vulnerability exists when the Win…7.8
• CVE-2020-16927<p>A denial of service vulnerability exists in Remote Deskto…7.5
• CVE-2020-16928<p>An elevation of privilege vulnerability exists in the way…7.8
• CVE-2020-16929<p>A remote code execution vulnerability exists in Microsoft…7.8