CVE-2019-1448

CVSS 3.1: 7.8 high
EPSS: 30%p98
Published: Nov 12, 2019 · Nov 12, 2019
Modified: Jun 17, 2026

Analyze CVE-2019-1448 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

Vendors: microsoft

Products: excel, office, office 365 proplus

Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (29.8%)

In the news

3 stories

Threat Source newsletter (Nov. 14, 2019)

Cisco TalosNov 14, 19:00 UTC · Nov 14, 2019RansomwareCVE-2019-14482

Microsoft Patch Tuesday — Nov. 2019: Vulnerability disclosures and Snort coverage

Cisco TalosNov 12, 19:58 UTC · Nov 12, 2019VulnerabilityCVE-2019-1448 CVE-2019-0721 CVE-2019-1389+702 · 1 read

Vulnerability Spotlight: Remote code execution vulnerability in Microsoft Excel

Cisco TalosNov 12, 19:07 UTC · Nov 12, 2019VulnerabilityExploitedCVE-2019-14482