9.3

CVE-2019-1297

Warning

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Excel Version2010 Updatesp2
Microsoft ≫ Excel Version2013 Updatesp1
Microsoft ≫ Excel Version2013 Updatesp1 SwEditionrt
Microsoft ≫ Excel Version2016
Microsoft ≫ Office Version2016 SwPlatformmac_os
Microsoft ≫ Office Version2019
Microsoft ≫ Office Version2019 SwPlatformmacos

03.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

Microsoft Excel Remote Code Execution Vulnerability

Vulnerability

A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.

Description

Apply updates per vendor instructions.

Required actions
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 56.78% 0.98
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
134c704f-9b21-4f2e-91b3-4a467353bcc0 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H