CVE-2019-1297highunder attack

CVE-2019-1297: high-severity vulnerability in Microsoft Excel

Published · Updated

Follow this CVE+ Monitor Microsoft Office+ Monitor Microsoft Excel

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

56Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 8.8epss 22%
from disclosure to weapon
Published on NVDSep 11
CISA KEV+904d
Action required by CISAfederal deadline: 2022-03-17

Apply updates per vendor instructions.

In short

Microsoft Excel can be tricked into running malicious code when opening a specially crafted file. This happens because the software doesn't properly check objects in memory, allowing attackers to take control of your computer.

Technical detail

Remote code execution vulnerability in Microsoft Excel's memory object handling. Attack vector: user opens malicious .xlsx or similar file; pre-condition: victim must open the crafted document. Impact: arbitrary code execution with privileges of the affected user.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Microsoft · Microsoft ExcelMicrosoft · Microsoft OfficeMicrosoft · Office 365 ProPlus
Related CVEs — Microsoft Excel

In the same product, most dangerous first.

CVE-2019-0541HIGHCVE-2019-0541EPSS 53.2%KEVCVE-2018-1026—CVE-2018-1026EPSS 41.0%CVE-2019-1448—CVE-2019-1448EPSS 29.8%CVE-2018-8587—CVE-2018-8587EPSS 28.8%CVE-2018-8148—CVE-2018-8148EPSS 24.3%CVE-2018-8147—CVE-2018-8147EPSS 24.3%