⚠ Actively exploited

Added to CISA KEV on 2022-03-03. Federal agencies required to patch by 2022-03-17. Required action: Apply updates per vendor instructions..

CVE-2019-1297

6 documents6 sources

Severity

8.8HIGH

EPSS

40.7%

top 2.64%

CISA KEV

KEV

Added 2022-03-03

Due 2022-03-17

Exploit

Exploited in wild

Active exploitation observed

Affected products

Microsoft Microsoft Excel Microsoft Microsoft Office Microsoft Office 365 Proplus +2 more

Timeline

PublishedSep 11

KEV addedMar 3

KEV dueMar 17

Latest updateMay 24

CISA Required Action: Apply updates per vendor instructions.

Description

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages5 packages

▶NVDmicrosoft/excel2010, 2013, 2016+2

▶CVEListV5microsoft/microsoft_excel7 versions+6

▶NVDmicrosoft/office2016, 2019+1

▶CVEListV5microsoft/microsoft_office4 versions+3

▶CVEListV5microsoft/office_365_proplus32-bit Systems, 64-bit Systems+1

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

GHSA

GHSA-9vrg-75vp-xj72: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft↗2022-05-24

▶

CVEList

CVE-2019-1297: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft↗2019-09-11

▶

VulnCheck

Microsoft Excel Remote Code Execution Vulnerability↗2019

▶

📋Vendor Advisories

CISA

Microsoft Excel Remote Code Execution Vulnerability↗2022-03-03

▶

Microsoft

Microsoft Excel Remote Code Execution Vulnerability↗2019-09-10

▶