CVE-2019-1297 vulnerability in Microsoft Products
Published on September 11, 2019
Known Exploited Vulnerability
This Microsoft Excel Remote Code Execution Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.
The following remediation steps are recommended / required by March 17, 2022: Apply updates per vendor instructions.
Vulnerability Analysis
CVE-2019-1297 can be exploited with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 2.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.
Products Associated with CVE-2019-1297
You can be notified by stack.watch whenever vulnerabilities like CVE-2019-1297 are published in these products:
What versions are vulnerable to CVE-2019-1297?
-
Microsoft Excel
Version 2010
sp2
-
Microsoft Excel
Version 2013
sp1
-
Microsoft Excel
Version 2013
sp1
-
Microsoft Excel
Version 2016
-
Microsoft Office
Version 2016
mac_os
-
Microsoft Office
Version 2019
-
Microsoft Office
Version 2019
macos
-
Microsoft Office 365 Proplus
Version -