CVE-2019-1331

high · 8.8

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-1327.

8.8

CVSS

19.7%

EPSS (exploit prob.)

97th

EPSS percentile

2019-10-10

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Vendor	Product	Affected versions
microsoft	excel	2010
microsoft	excel	2013
microsoft	excel	2013
microsoft	excel	2016
microsoft	office	2010
microsoft	office	2013
microsoft	office	2013
microsoft	office	2016
microsoft	office	2016
microsoft	office	2019
microsoft	office	2019
microsoft	office_365_proplus	all versions
microsoft	office_online_server	all versions
microsoft	excel_services	all versions
microsoft	sharepoint_server	2010

Check a specific version with /api/v1/cve/match.

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1331
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1331

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2019-1331