CVE-2019-1263: Infoleak
First published: Wed Sep 11 2019(Updated: )
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Excel | =2010-sp2 | |
| Microsoft Excel | =2013-sp1 | |
| Microsoft Excel | =2013-sp1 | |
| Microsoft Excel | =2016 | |
| Microsoft Excel | =2019 | |
| Microsoft Office | =2016 | |
| Microsoft Office | =2019 | |
| Microsoft Office 365 Proplus |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2019-1263?
The severity of CVE-2019-1263 is medium.
How does the information disclosure vulnerability in Microsoft Excel occur?
The information disclosure vulnerability in Microsoft Excel occurs when it improperly discloses the contents of its memory.
Which versions of Microsoft Excel are affected by CVE-2019-1263?
Microsoft Excel 2010 SP2, 2013 SP1, 2016, and 2019 are affected by CVE-2019-1263.
Is Microsoft Office also affected by CVE-2019-1263?
Yes, Microsoft Office 2016 and 2019, as well as Microsoft Office 365 Proplus, are affected by CVE-2019-1263.
How can I fix the information disclosure vulnerability in Microsoft Excel?
To fix the information disclosure vulnerability in Microsoft Excel, it is recommended to apply the security update provided by Microsoft. Please refer to the official Microsoft Security Guidance Advisory for more information: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1263.
- agent/type
- agent/last-modified-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/author
- agent/severity
- agent/references
- agent/remedy
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- agent/event
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft excel
- version/microsoft excel/2010-sp2
- version/microsoft excel/2013-sp1
- version/microsoft excel/2016
- version/microsoft excel/2019
- canonical/microsoft office
- version/microsoft office/2016
- version/microsoft office/2019
- canonical/microsoft office 365 proplus