NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2019-1373

CVSS 3.1: 9.8 critical
EPSS: 21%p97
Published: Nov 12, 2019 · Nov 12, 2019
Modified: Jun 17, 2026

Analyze CVE-2019-1373 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.

Vendors: microsoft

Products: exchange server

Weakness: CWE-502

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (21.4%)

In the news

3 stories

Microsoft Patch Tuesday updates fix CVE-2019

Security AffairsNov 13, 08:26 UTC · Nov 13, 2019VulnerabilityExploitedCVE-2019-1429 CVE-2019-13732 · 1 read

60

November 2019 Patch Tuesday: Actively exploited IE zero-day fixed

Help Net SecurityNov 13, 00:00 UTC · Nov 13, 2019Exploit / PoCExploitedCVE-2019-1429 CVE-2019-16863 CVE-2019-1373+12 · 1 read

60

Microsoft Patch Tuesday — Nov. 2019: Vulnerability disclosures and Snort coverage

Cisco TalosNov 12, 19:58 UTC · Nov 12, 2019VulnerabilityCVE-2019-1448 CVE-2019-0721 CVE-2019-1389+702 · 1 read

60