CVE-2019-1461: High severity microsoft office vulnerability

Published Dec 10, 2019

Updated

A denial of service vulnerability exists in Microsoft Word software when the software fails to properly handle objects in memory, aka 'Microsoft Word Denial of Service Vulnerability'.

Affected Software

6 affected components

Microsoft Office=2010-sp2

Microsoft Office=2019

Microsoft Office 365 ProPlus

Microsoft Word=2010-sp2

Microsoft Word=2013-sp1

Microsoft Word=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1461

Event History

Dec 10, 2019

CVE Published

via MITRE·09:40 PM

Data Sourced

via MITRE·09:40 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-1461?

CVE-2019-1461 is a denial of service vulnerability in Microsoft Word software.

What is the severity of CVE-2019-1461?

CVE-2019-1461 has a severity rating of 6.5 (high).

Which software versions are affected by CVE-2019-1461?

Microsoft Office 2010 SP2, Microsoft Office 2019, Microsoft Office 365 Proplus, Microsoft Word 2010 SP2, Microsoft Word 2013 SP1, and Microsoft Word 2016 are affected by CVE-2019-1461.

How can I fix CVE-2019-1461?

Apply the latest security updates provided by Microsoft to fix CVE-2019-1461.

Where can I find more information about CVE-2019-1461?

You can find more information about CVE-2019-1461 on the Microsoft Security Guidance advisory page: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1461.