← Back

CVE-2019-0585

nvd nist
Published: Jan 8, 2019Modified: Jun 17, 2026

JSON object

Loading...
8.8
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Server.

Affected (16)

8 products
Office
Office 365 Proplus
Office Online Server
Office Web Apps Server
Office Word Viewer
Sharepoint Server
Word
Word Automation Services
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Version 2010 sp2
Version 2016
Version 2019
Version 2019
All versions
All versions
Version 2010 sp2
All versions
Microsoft
Version 2013 sp1
Version 2016
Version 2019
Microsoft
Version 2010 sp2
Version 2013 sp1
Version 2013 sp1
Version 2016
All versions

References (4)

Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.