Lucene search

K
mscveMicrosoftMS:CVE-2019-1264
HistorySep 10, 2019 - 7:00 a.m.

Microsoft Office Security Feature Bypass Vulnerability

2019-09-1007:00:00
Microsoft
msrc.microsoft.com
5

0.001 Low

EPSS

Percentile

40.6%

A security feature bypass vulnerability exists when Microsoft Office improperly handles input. An attacker who successfully exploited the vulnerability could execute arbitrary commands.

In a file-sharing attack scenario, an attacker could provide a specially crafted document file designed to exploit the vulnerability, and then convince a user to open the document file and interact with the document by clicking a specific cell.

The update addresses the vulnerability by correcting how Microsoft Office handles input.

0.001 Low

EPSS

Percentile

40.6%