CVE-2019-1331: Critical severity microsoft office excel vulnerability

Published Oct 10, 2019

Updated

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1327.

Affected Software

15 affected components

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Office=2010-sp2

Microsoft Office=2013-sp1

Microsoft Office=2016

Microsoft Office Mac Os=2016

Microsoft Office=2019

Microsoft Office Macos=2019

Microsoft Office 365 ProPlus

Microsoft Office Online Server

Microsoft Excel Services

Microsoft SharePoint Server=2010-sp2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1331

Event History

Oct 10, 2019

CVE Published

via MITRE·01:28 PM

Data Sourced

via MITRE·01:28 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-1331?

CVE-2019-1331 is a remote code execution vulnerability in Microsoft Excel software.

What is the severity of CVE-2019-1331?

CVE-2019-1331 has a severity rating of 8.8, which is considered critical.

Which software is affected by CVE-2019-1331?

Microsoft Excel, Microsoft Office, Microsoft Office 365 Proplus, Microsoft Office Online Server, and Microsoft Excel Services are all affected by CVE-2019-1331.

How can I fix CVE-2019-1331?

To fix CVE-2019-1331, it is recommended to update your Microsoft Excel software to the latest version.

Where can I find more information about CVE-2019-1331?

You can find more information about CVE-2019-1331 on the Microsoft Security Guidance Advisory at the following link: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1331