microsoft excel CVE-2019-1297 vulnerability in Microsoft Products
Published on September 11, 2019

product logo product logo
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

Vendor Advisory NVD

Known Exploited Vulnerability

This Microsoft Excel Remote Code Execution Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.

The following remediation steps are recommended / required by March 17, 2022: Apply updates per vendor instructions.

Vulnerability Analysis

CVE-2019-1297 can be exploited with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 2.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.


Products Associated with CVE-2019-1297

You can be notified by stack.watch whenever vulnerabilities like CVE-2019-1297 are published in these products:

 
 
 

What versions are vulnerable to CVE-2019-1297?