CVE-2019-1155: microsoft microsoft office 2010 service pack 2
Vulnerability summary
CVE-2019-1155 is a high (CVSS 9.3) vulnerability in microsoft microsoft office 2010 service pack 2. EPSS estimates a 4.27% chance of exploitation in the next 30 days, higher than 90.9% of scored vulnerabilities.
Timeline
- 14-08-2019PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory. An attacker who successfully exploited this vulnerability could execute arbitrary code on a victim system. An attacker could exploit this vulnerability by enticing a victim to open a specially crafted file. The update addresses the vulnerability by correcting the way the Windows Jet Database Engine handles objects in memory.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS trend
Probability
4.27%
Chance of exploitation in the next 30 days
Percentile
91%
Versus all other CVEs
30-day change
0.00 pp
From 4.27% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft38 products
- microsoft office 2010 service pack 2≥ 13.0.0.0, < publication
- microsoft office 2013 service pack 1≥ 15.0.0, < publication
- microsoft office 2016≥ 16.0.0, < publication
- microsoft office 2019≥ 19.0.0, < https://aka.ms/OfficeSecurityReleases
- officeEOL2010:sp2 | 2013:sp1 | 2016 | 2019
1 vendor · 38 products
References
1 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1155X Refsource MISCPatchVendor Advisory