IT

Tracker / CVE-2019-0540

CVE-2019-0540

Medium 5.5

A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.

Affected products and versions

microsoft excel_viewer
microsoft office
microsoft office_365_proplus
microsoft powerpoint_viewer
microsoft word_viewer

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References