CVE-2019-0825

high · 7.8

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0824, CVE-2019-0826, CVE-2019-0827.

7.8

CVSS

10.5%

EPSS (exploit prob.)

96th

EPSS percentile

2019-04-09

Published

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Affected versions
microsoft	office	2010
microsoft	office	2016
microsoft	office	2019
microsoft	office_365_proplus	all versions

Check a specific version with /api/v1/cve/match.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0825
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0825

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2019-0825