CVE-2019-0823: High severity microsoft office vulnerability

Published Apr 9, 2019

Updated

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0824, CVE-2019-0825, CVE-2019-0826, CVE-2019-0827.

Affected Software

1 affected component

Microsoft Office=2010-sp2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0823

Event History

Apr 9, 2019

CVE Published

via MITRE·08:16 PM

Data Sourced

via MITRE·08:16 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-0823?

CVE-2019-0823 has a severity rating of critical as it allows for remote code execution.

How do I fix CVE-2019-0823?

To fix CVE-2019-0823, apply the latest security updates provided by Microsoft for the affected version of Office.

Which software is affected by CVE-2019-0823?

CVE-2019-0823 specifically affects Microsoft Office 2010 Service Pack 2.

Can CVE-2019-0823 be exploited remotely?

Yes, CVE-2019-0823 can be exploited remotely by an attacker to execute arbitrary code.

What are the potential impacts of CVE-2019-0823?

The potential impacts of CVE-2019-0823 include unauthorized access to system resources and data compromise.