CVE-2019-0824

EUVD-2019-1576 · Published Apr 9, 2019

A remote code execution vulnerability exists when the Microsoft Office Access Connectivity Engine improperly handles objects in memory, aka 'Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2019-0823, CVE-2019-0825, CVE-2019-0826, CVE-2019-0827.

Technologies

Microsoft OfficeMicrosoft Office 365 Proplus

CVSS scores

v3.07.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
v2.06.8AV:N/AC:M/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0824

Potentially impacted assets

See if this affects your attack surface