CVE-2019-0585
high · 8.8A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Server.
8.8
CVSS
22.0%
EPSS (exploit prob.)
98th
EPSS percentile
2019-01-08
Published
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | office | 2010 |
| microsoft | office | 2016 |
| microsoft | office | 2019 |
| microsoft | office | 2019 |
| microsoft | office_365_proplus | all versions |
| microsoft | office_online_server | all versions |
| microsoft | office_web_apps_server | 2010 |
| microsoft | office_word_viewer | all versions |
| microsoft | sharepoint_server | 2013 |
| microsoft | sharepoint_server | 2016 |
| microsoft | sharepoint_server | 2019 |
| microsoft | word | 2010 |
| microsoft | word | 2013 |
| microsoft | word | 2013 |
| microsoft | word | 2016 |
| microsoft | word_automation_services | all versions |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2019-0585