Vulnerability in Microsoft Office
CVE-2019-0559
An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft…
EPSS: 0.210 (95.8th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Office — versions 2019 for 32-bit editions, 2019 for 64-bit editions
- Microsoft Outlook — versions 2010 Service Pack 2 (32-bit editions), 2010 Service Pack 2 (64-bit editions), 2013 RT Service Pack 1
- Microsoft Office — versions 365 ProPlus for 32-bit Systems, 365 ProPlus for 64-bit Systems
Public proof-of-concept exploits
References
- 106397 (vdb-entry, x_refsource_BID)
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0559 (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2019-0559?
- CVE-2019-0559 is a vulnerability in Microsoft Office. Published 2019-01-08.
- Is CVE-2019-0559 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.