CVE-2019-1111: Critical severity microsoft office excel vulnerability
Published Jul 15, 2019
·Updated
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1110.
Affected Software
10 affected components
Microsoft Excel=2010-sp2
Microsoft Excel=2013-sp1
Microsoft Excel=2013-sp1
Microsoft Excel=2016
Microsoft Office=2010-sp2
Microsoft Office=2013
Microsoft Office=2013-sp1
Microsoft Office=2016
Microsoft Office=2019
Microsoft Office 365 ProPlus
Remediation
Event History
Jul 15, 2019
CVE Published
07:15 PM
Jul 29, 2019
CVE Published
via MITRE·02:09 PM
Data Sourced
via MITRE·02:09 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2019-1111?
CVE-2019-1111 is a remote code execution vulnerability that exists in Microsoft Excel software.
2
How does CVE-2019-1111 vulnerability occur?
CVE-2019-1111 vulnerability occurs when the Microsoft Excel software fails to properly handle objects in memory.
3
Which versions of Microsoft Excel are affected by CVE-2019-1111?
Microsoft Excel versions 2010 with SP2, 2013 with SP1, and 2016 are affected by CVE-2019-1111.
4
What is the severity rating of CVE-2019-1111?
CVE-2019-1111 has a severity rating of 8.8, which is classified as critical.
5
How can I fix the CVE-2019-1111 vulnerability?
To fix the CVE-2019-1111 vulnerability, it is recommended to install the latest security updates provided by Microsoft.