CVEvulnerability
CVE-2019-1400
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-12-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1463.
Affected configurations
• microsoft office 2010
• microsoft office 2013
• microsoft office 2016
• microsoft office 2019
• microsoft office 365 proplus
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1400 Patch, Vendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1400 Patch, Vendor Advisory