CVE-2019-1297

HIGHCISA KEV

8.8

Descripcion

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

Detalles CVE

Puntuacion CVSS v3.18.8

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vector de ataqueNETWORK

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioREQUIRED

Publicado9/11/2019

Ultima modificacion10/29/2025

Fuentekev

Avistamientos honeypot0

CISA KEV

VendedorMicrosoft

ProductoExcel

Nombre vulnerabilidadMicrosoft Excel Remote Code Execution Vulnerability

Fecha inclusion KEV2022-03-03

Fecha limite remediacion2022-03-17

Uso en ransomwareUnknown

Productos afectados

microsoft:excelmicrosoft:officemicrosoft:office_365_proplus

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1297(secure@microsoft.com)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1297(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1297(134c704f-9b21-4f2e-91b3-4a467353bcc0)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.