CVE-2019-1463: Infoleak

Published Dec 10, 2019

Updated

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1400.

Affected Software

5 affected components

Microsoft Office=2010-sp2

Microsoft Office=2013-sp1

Microsoft Office=2016

Microsoft Office=2019

Microsoft Office 365 ProPlus

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1463

Event History

Dec 10, 2019

CVE Published

via MITRE·09:40 PM

Data Sourced

via MITRE·09:40 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2019-1463?

CVE-2019-1463 is an information disclosure vulnerability in Microsoft Access software when the software fails to properly handle objects in memory.

What is the severity of CVE-2019-1463?

The severity of CVE-2019-1463 is medium (5.5).

Which software versions are affected by CVE-2019-1463?

Microsoft Office versions 2010 (SP2), 2013 (SP1), 2016, 2019, and Office 365 Proplus are affected by CVE-2019-1463.

How can I fix CVE-2019-1463?

To fix CVE-2019-1463, users should apply the necessary security updates provided by Microsoft.

Where can I find more information about CVE-2019-1463?

More information about CVE-2019-1463 can be found at the following link: [Microsoft Security Guidance Advisory for CVE-2019-1463](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1463)