CVE-2019-1109: Improper Input Validation

A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update addresses the...

Description of the security update for Office 2013: July 9, 2019

Description of the security update for Office 2013: July 9, 2019 Summary This security update resolves an information disclosure vulnerability that exists if Microsoft Office Javascript does not check the validity of the webpage that is making a request to Office documents. To learn more about th...