CVE-2019-1109: Input Validation
A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update addresses the vulnerability by correcting the way that Microsoft Office Javascript verifies trusted web pages., aka 'Microsoft Office Spoofing Vulnerability'.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-1109?
CVE-2019-1109 is a spoofing vulnerability in Microsoft Office Javascript that allows attackers to read or write information in Office documents.
How does CVE-2019-1109 affect Microsoft Office?
CVE-2019-1109 affects Microsoft Office 2013 SP1, Office 2016, Office 2019, and Office 365 ProPlus.
What is the severity level of CVE-2019-1109?
CVE-2019-1109 has a severity level of 9.1, which is considered critical.
How can I fix CVE-2019-1109?
To fix CVE-2019-1109, apply the security update provided by Microsoft.
Where can I find more information about CVE-2019-1109?
You can find more information about CVE-2019-1109 at the following link: [CVE-2019-1109](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1109).