CVE-2019-1463

CWE-200 — Information Exposure4 documents4 sources

Severity

5.5MEDIUM

EPSS

1.6%

top 18.28%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Microsoft Office Microsoft Office 365 Proplus Microsoft Office

Timeline

PublishedDec 10

Latest updateMay 24

Description

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1400.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶NVDmicrosoft/office4 versions+3

▶CVEListV5microsoft/microsoft_office9 versions+8

▶CVEListV5microsoft/office_365_proplus32-bit Systems, 64-bit Systems+1

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

GHSA

GHSA-7mx7-663h-f752: An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microso↗2022-05-24

▶

CVEList

CVE-2019-1463: An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microso↗2019-12-10

▶

📋Vendor Advisories

Microsoft

Microsoft Access Information Disclosure Vulnerability↗2019-12-10

▶