Microsoft WordPad Information Disclosure Vulnerability

Microsoft WordPad can accidentally reveal sensitive information from your computer's memory when you open certain files. This happens because the application doesn't properly check the data it reads, allowing attackers to see private information they shouldn't access.

CWE-20 (Improper Input Validation) in Microsoft WordPad allows information disclosure through insufficient validation of file contents. An attacker can craft a malicious document that, when opened by a user, causes the application to expose sensitive data from process memory. The attack requires user interaction (opening a file) and results in unauthorized information exposure.