CVE-2019-1264

🗓️ 11 Sep 2019 21:24:59Reported by microsoftType

Microsoft Office Security Feature Bypass Vulnerability

Reporter	Title	Published	Views	Family All 28
BDU FSTEC	The vulnerabilities of Microsoft Office packages, Office 365, and the Microsoft Project project management software are due to insufficient validation of input data, allowing attackers to execute arbitrary commands.	17 Sep 201900:00	–	bdu_fstec
CVE	CVE-2019-1264	11 Sep 201921:24	–	cve
EUVD	EUVD-2019-9829	7 Oct 202500:30	–	euvd
Microsoft KB	Description of the security update for Project 2010: September 10, 2019	10 Sep 201907:00	–	mskb
Microsoft KB	Description of the security update for Project 2013: September 10, 2019	10 Sep 201907:00	–	mskb
Microsoft KB	Description of the security update for Office 2010: September 10, 2019	10 Sep 201907:00	–	mskb
Microsoft KB	Description of the security update for Office 2016: September 10, 2019	10 Sep 201907:00	–	mskb
Microsoft KB	Description of the security update for Project 2016: September 10, 2019	10 Sep 201907:00	–	mskb
Microsoft KB	Description of the security update for Office 2013: September 10, 2019	10 Sep 201907:00	–	mskb
Kaspersky	KLA11551 Multiple vulnerabilities in Microsoft Office	10 Sep 201900:00	–	kaspersky

[
  {
    "product": "Microsoft Project",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (64-bit editions)"
      },
      {
        "status": "affected",
        "version": "2016 (32-bit edition)"
      },
      {
        "status": "affected",
        "version": "2016 (64-bit edition)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (64-bit editions)"
      }
    ]
  },
  {
    "product": "Microsoft Office",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (64-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1 (64-bit editions)"
      },
      {
        "status": "affected",
        "version": "2013 RT Service Pack 1"
      },
      {
        "status": "affected",
        "version": "2016 (32-bit edition)"
      },
      {
        "status": "affected",
        "version": "2016 (64-bit edition)"
      },
      {
        "status": "affected",
        "version": "2019 for 32-bit editions"
      },
      {
        "status": "affected",
        "version": "2019 for 64-bit editions"
      }
    ]
  },
  {
    "product": "Office 365 ProPlus",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "32-bit Systems"
      },
      {
        "status": "affected",
        "version": "64-bit Systems"
      }
    ]
  }
]

Source	Link
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1264

11 Sep 2019 21:24Current

7.6High risk

Vulners AI Score7.6

EPSS0.07973