CVE-2019-0559
MEDIUMMicrosoft Office and Outlook - Information Disclosure via Improper Message Handling
Title source: llmDescription
An information disclosure vulnerability exists when Microsoft Outlook improperly handles certain types of messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/106397
Patch, Vendor Advisory x_refsource_confirm
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0559
Scores
CVSS v3
6.5
EPSS
0.0678
EPSS Percentile
93.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Details
Status
published
Products (5)
microsoft/office
2019
microsoft/office_365_proplus
microsoft/outlook
2010 sp2
microsoft/outlook
2013 sp1 (2 CPE variants)
microsoft/outlook
2016
Published
Jan 08, 2019
Tracked Since
Feb 18, 2026