CVE-2019-1446

Summary

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka 'Microsoft Excel Information Disclosure Vulnerability'.

Affected Software

VendorProductVersion RangeStatus
MicrosoftMicrosoft Excel2010 Service Pack 2 (32-bit editions)affected
MicrosoftMicrosoft Excel2010 Service Pack 2 (64-bit editions)affected
MicrosoftMicrosoft Excel2013 Service Pack 1 (32-bit editions)affected
MicrosoftMicrosoft Excel2013 Service Pack 1 (64-bit editions)affected
MicrosoftMicrosoft Excel2013 RT Service Pack 1affected
MicrosoftMicrosoft Excel2016 for Macaffected
MicrosoftMicrosoft Excel2016 (32-bit edition)affected
MicrosoftMicrosoft Excel2016 (64-bit edition)affected
MicrosoftMicrosoft Office2010 Service Pack 2 (32-bit editions)affected
MicrosoftMicrosoft Office2010 Service Pack 2 (64-bit editions)affected
MicrosoftMicrosoft Office2013 Service Pack 1 (32-bit editions)affected
MicrosoftMicrosoft Office2013 Service Pack 1 (64-bit editions)affected
MicrosoftMicrosoft Office2013 RT Service Pack 1affected
MicrosoftMicrosoft Office2016 (32-bit edition)affected
MicrosoftMicrosoft Office2016 (64-bit edition)affected
MicrosoftMicrosoft Office2019 for 32-bit editionsaffected
MicrosoftMicrosoft Office2019 for 64-bit editionsaffected
MicrosoftMicrosoft Office2019 for Macaffected
MicrosoftMicrosoft SharePoint Enterprise Server2013 Service Pack 1affected
MicrosoftOffice 365 ProPlus32-bit Systemsaffected
MicrosoftOffice 365 ProPlus64-bit Systemsaffected
MicrosoftMicrosoft Office Online Serverunspecifiedaffected
MicrosoftExcel Services on Microsoft SharePoint Server 2010 Service Pack 2unspecifiedaffected

Weaknesses

  • Information Disclosure

ADP Enrichment

CVE Program Container

Additional References

References