CVE-2019-1448

—

CVSS 3.1

7.8 high

EPSS

30%p98

Published

Nov 12, 2019 (Nov 12, 2019)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

Vendors: microsoft
Products: excel, office, office 365 proplus
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (29.8%)

In the news3 stories

Threat Source newsletter (Nov. 14, 2019)

Cisco TalosNov 14, 19:00 UTC · Nov 14, 2019Ransomware CVE-2019-1448

Microsoft Patch Tuesday — Nov. 2019: Vulnerability disclosures and Snort coverage

Cisco TalosNov 12, 19:58 UTC · Nov 12, 2019Vulnerability CVE-2019-1448 CVE-2019-0721 CVE-2019-1389+70 CVEs

Vulnerability Spotlight: Remote code execution vulnerability in Microsoft Excel

Cisco TalosNov 12, 19:07 UTC · Nov 12, 2019Vulnerability in the wildCVE-2019-1448