CVE-2019-1462

HIGH

Microsoft PowerPoint - Remote Code Execution via Uninitialized Memory Handling

Title source: llm

Description

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka 'Microsoft PowerPoint Remote Code Execution Vulnerability'.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_misc

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1462

Third Party Advisory x_refsource_misc

https://www.zerodayinitiative.com/advisories/ZDI-19-1006/

Scores

CVSS v3 7.8

EPSS 0.1833

EPSS Percentile 96.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-908

Status published

Products (6)

microsoft/office 2016

microsoft/office 2019 (2 CPE variants)

microsoft/office_365_proplus

microsoft/powerpoint 2010 sp2

microsoft/powerpoint 2013 sp1

microsoft/powerpoint 2016

Published Dec 10, 2019

Tracked Since Feb 18, 2026