CVE-2019-0669

4 documents4 sources

Severity

6.5MEDIUM

EPSS

25.8%

top 3.75%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Microsoft Excel Microsoft Microsoft Excel Viewer Microsoft Microsoft Office +4 more

Timeline

PublishedMar 5

Latest updateMay 13

Description

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages7 packages

▶NVDmicrosoft/excel2010, 2013, 2016+2

▶CVEListV5microsoft/microsoft_excel7 versions+6

▶CVEListV5microsoft/microsoft_excel_viewerunspecified

▶NVDmicrosoft/office2010, 2016, 2019+2

▶CVEListV5microsoft/microsoft_office6 versions+5

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

GHSA

GHSA-79xg-hjcw-v497: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information↗2022-05-13

▶

CVEList

CVE-2019-0669: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information↗2019-03-06

▶

📋Vendor Advisories

Microsoft

Microsoft Excel Information Disclosure Vulnerability↗2019-02-12

▶