CVE-2019-1297: Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.
Other sources
A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.
— CISA
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-1297?
CVE-2019-1297 is a remote code execution vulnerability in Microsoft Excel software.
Which software is affected by CVE-2019-1297?
Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2016, Microsoft Office 2019, and Microsoft Office 365 Proplus are affected by CVE-2019-1297.
What is the severity of CVE-2019-1297?
The severity of CVE-2019-1297 is critical with a CVSS score of 8.8.
How does CVE-2019-1297 work?
CVE-2019-1297 allows an attacker to execute arbitrary code on a target system by exploiting a vulnerability in how Microsoft Excel handles objects in memory.
Is there a fix available for CVE-2019-1297?
Yes, Microsoft has released security updates to address the vulnerability. Users should update their software to the latest available version.