CVE-2019-1462

—

CVSS 3.1

7.8 high

EPSS

18%p97

Published

Dec 10, 2019 (Dec 10, 2019)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka 'Microsoft PowerPoint Remote Code Execution Vulnerability'.

Vendors: microsoft
Products: office, office 365 proplus, powerpoint
Weakness: CWE-908
Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (18.0%)

In the news2 stories

Latest Microsoft Update Patches New Windows 0

The Hacker NewsDec 11, 06:19 UTC · Dec 11, 2019Vulnerability CVE-2019-1458 CVE-2019-1471 CVE-2019-14621

Microsoft Patch Tuesday — Dec. 2019: Vulnerability disclosures and Snort coverage

Cisco TalosDec 10, 18:41 UTC · Dec 10, 2019Vulnerability CVE-2019-1468 CVE-2019-1471 CVE-2019-1458+22 CVEs