8 matches found
CVE-2019-1327
CVE-2019-1327 is a remote code execution vulnerability in Microsoft Excel caused by improper handling of objects in memory. The Red Hat records also list CVE-2019-1331 as related, sharing the same underlying issue. Public sources in the provided documents describe the issue but do not include con...
CVE-2019-0822
CVE-2019-0822 is a remote code execution vulnerability in Microsoft Graphics Components related to how objects are handled in memory. Reports from MSRC and OpenVAS indicate exploitation requires a user to open a specially crafted file, enabling an attacker to execute arbitrary code on the target ...
CVE-2019-0801
CVE-2019-0801 is a remote code execution flaw in Microsoft Office triggered by opening a specially crafted URL file pointing to an Excel/PowerPoint file. Root cause: Office mishandles certain files, enabling code execution in the user context if the file is opened after download. The vulnerabilit...
CVE-2019-0946
The provided documents identify CVE-2019-0946 as a remote code execution vulnerability affecting Microsoft Office Access Connectivity Engine, caused by improper handling of objects in memory. The Red Hat and NVD entries consistently describe a memory-handling flaw in the Access Connectivity Engin...
CVE-2019-0824
CVE-2019-0824 is a remote code execution vulnerability in Microsoft Office Access Connectivity Engine caused by improper handling of memory objects. An attacker could trigger code execution by convincing a user to open a specially crafted file. The vulnerability affects the Office Access Connecti...
CVE-2019-0825
CVE-2019-0825 is Microsoft Office Access Connectivity Engine Remote Code Execution vulnerability. The vulnerability stems from improper handling of memory/objects by the Access Connectivity Engine, enabling arbitrary code execution when a user opens a specially crafted file. The issue is addresse...
CVE-2019-0827
CVE-2019-0827 concerns remote code execution in Microsoft Office Access Connectivity Engine due to improper handling of memory objects. The vulnerability is triggered when the engine mishandles objects in memory; exploitation could allow arbitrary code execution on a targeted system. Connected do...
CVE-2019-0826
CVE-2019-0826 is an RCE in the Microsoft Office Access Connectivity Engine caused by improper handling of memory objects. The vulnerability affects Microsoft Office components that use the Access Connectivity Engine, enabling an attacker to execute arbitrary code in the context of the user. The C...