First published: Mon Apr 08 2019(Updated: )
A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Office | =2010-sp2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-0748 has a critical severity level due to its potential for remote code execution.
To mitigate CVE-2019-0748, apply the latest security updates provided by Microsoft for affected Office software.
CVE-2019-0748 affects Microsoft Office 2010 with Service Pack 2 installed.
Yes, CVE-2019-0748 can be exploited remotely without user interaction, making it highly dangerous.
Exploitation of CVE-2019-0748 could allow an attacker to execute arbitrary code on the affected system.