CVE-2019-0561: Medium severity microsoft office vulnerability

Published Jan 8, 2019
·
Updated

An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word.

Affected Software

12 affected components
Microsoft Office=2010-sp2
Microsoft Office Mac Os X=2016
Microsoft Office=2019
Microsoft Office Macos=2019
Microsoft Office 365 ProPlus
Microsoft Office Web Apps Server=2010-sp2
Microsoft SharePoint Server=2010-sp2
Microsoft Word=2010-sp2
Microsoft Word=2013-sp1
Microsoft Word=2013-sp1
Microsoft Word=2016
Microsoft Word Automation Services

Event History

Jan 8, 2019
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
DescriptionWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2019-0561?

CVE-2019-0561 is an information disclosure vulnerability in Microsoft Word macro buttons.

2

Which software is affected by CVE-2019-0561?

Microsoft Word, Office 365 ProPlus, Microsoft Office, and Word Automation Services are affected.

3

What is the severity of CVE-2019-0561?

The severity of CVE-2019-0561 is medium, with a severity value of 5.5.

4

How can I fix CVE-2019-0561?

To fix CVE-2019-0561, apply the latest security updates provided by Microsoft.

5

Where can I find more information about CVE-2019-0561?

You can find more information about CVE-2019-0561 at the following references: [http://www.securityfocus.com/bid/106399](http://www.securityfocus.com/bid/106399) and [https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0561](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0561)

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203