Home

CVE-2019-1464

Description

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka Microsoft Excel Information Disclosure Vulnerability.

Risk Information

Base Score
5.5
MODERATE
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
EPSS Score
Exploitation Probability
13.324

Associated Vulnerability

VulnerabilityOS Platform
Microsoft Excel Information Disclosure Vulnerability for Microsoft Office 2013 (KB4484184) 32-Bit EditionWindows
Microsoft Excel Information Disclosure Vulnerability for Microsoft Office 2013 (KB4484184) 64-Bit EditionWindows
Microsoft Excel Information Disclosure Vulnerability for Microsoft Office 2016 (KB4484182) 32-Bit EditionWindows
Microsoft Excel Information Disclosure Vulnerability for Microsoft Office 2016 (KB4484182) 64-Bit EditionWindows
Microsoft Excel Information Disclosure Vulnerability for Microsoft Excel 2016 (KB4484179) 32-Bit EditionWindows
Microsoft Excel Information Disclosure Vulnerability for Microsoft Excel 2016 (KB4484179) 64-Bit EditionWindows
Microsoft Excel Information Disclosure Vulnerability for Microsoft Excel 2013 (KB4484190) 32-Bit EditionWindows
Microsoft Excel Information Disclosure Vulnerability for Microsoft Excel 2013 (KB4484190) 64-Bit EditionWindows
Microsoft Excel Information Disclosure Vulnerability for Microsoft Excel 2010 (KB4484196) 32-Bit EditionWindows
Microsoft Excel Information Disclosure Vulnerability for Microsoft Excel 2010 (KB4484196) 64-Bit EditionWindows
Microsoft Excel Information Disclosure Vulnerability for Microsoft Office 2010 (KB4484192) 32-Bit EditionWindows
Microsoft Excel Information Disclosure Vulnerability for Microsoft Office 2010 (KB4484192) 64-Bit EditionWindows
Microsoft Access Information Disclosure Vulnerability for Office 365 Professional Plus Semi Annual Channel for x64 1902 of version(11328.20492)Windows
Microsoft Access Information Disclosure Vulnerability for Office 365 Professional Plus Semi Annual Channel for x86 1902 of version(11328.20492)Windows
Microsoft Access Information Disclosure Vulnerability for Office 365 Business Edition Semi Annual Channel for x64 1902 of version(11328.20492)Windows
Microsoft Access Information Disclosure Vulnerability for Office 365 Business Edition Semi Annual Channel for x86 1902 of version(11328.20492)Windows
Microsoft Access Information Disclosure Vulnerability for Office 365 Semi-Annual Channel Version 1902 (Build 11328.20492)Windows
Microsoft Access Information Disclosure Vulnerability for Office 365 Professional Plus Semi Annual Targeted Channel for x64 1908 of version(11929.20516)Windows
Microsoft Access Information Disclosure Vulnerability for Office 365 Professional Plus Semi Annual Targeted Channel for x86 1908 of version(11929.20516)Windows
Microsoft Access Information Disclosure Vulnerability for Office 365 Targeted Channel Version 1908 (Build 11929.20516)Windows
Microsoft Access Information Disclosure Vulnerability for Office 365 Professional Plus Monthly Channel for x64 1911 of version(12228.20364)Windows
Microsoft Access Information Disclosure Vulnerability for Office 365 Professional Plus Monthly Channel for x86 1911 of version(12228.20364)Windows
Microsoft Access Information Disclosure Vulnerability for Office 365 Business Edition Monthly Channel for x64 1911 of version(12228.20364)Windows
Microsoft Access Information Disclosure Vulnerability for Office 365 Business Edition Monthly Channel for x86 1911 of version(12228.20364)Windows
Microsoft Access Information Disclosure Vulnerability for Office 365 Monthly Channel Version 1911 (Build 12228.20364)Windows

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-27965Security Update for Microsoft Office 2013 (KB4484184) 32-Bit Edition
PATCH-27966Security Update for Microsoft Office 2013 (KB4484184) 64-Bit Edition
PATCH-27975Security Update for Microsoft Office 2016 (KB4484182) 32-Bit Edition
PATCH-27976Security Update for Microsoft Office 2016 (KB4484182) 64-Bit Edition
PATCH-27973Security Update for Microsoft Excel 2016 (KB4484179) 32-Bit Edition
PATCH-27974Security Update for Microsoft Excel 2016 (KB4484179) 64-Bit Edition
PATCH-27963Security Update for Microsoft Excel 2013 (KB4484190) 32-Bit Edition
PATCH-27964Security Update for Microsoft Excel 2013 (KB4484190) 64-Bit Edition
PATCH-27953Security Update for Microsoft Excel 2010 (KB4484196) 32-Bit Edition
PATCH-27954Security Update for Microsoft Excel 2010 (KB4484196) 64-Bit Edition
PATCH-28066Update for Office 365 Professional Plus Semi Annual Channel for x64 1902 of version(11328.20492)
PATCH-28068Update for Office 365 Professional Plus Semi Annual Channel for x86 1902 of version(11328.20492)
PATCH-28070Update for Office 365 Business Edition Semi Annual Channel for x64 1902 of version(11328.20492)
PATCH-28081Update for Office 365 Semi-Annual Channel Version 1902 (Build 11328.20492)
PATCH-28074Update for Office 365 Professional Plus Semi Annual Targeted Channel for x64 1908 of version(11929.20516)
PATCH-28076Update for Office 365 Professional Plus Semi Annual Targeted Channel for x86 1908 of version(11929.20516)
PATCH-28082Update for Office 365 Targeted Channel Version 1908 (Build 11929.20516)
PATCH-28058Update for Office 365 Professional Plus Monthly Channel for x64 1911 of version(12228.20364)
PATCH-28060Update for Office 365 Professional Plus Monthly Channel for x86 1911 of version(12228.20364)
PATCH-28062Update for Office 365 Business Edition Monthly Channel for x64 1911 of version(12228.20364)
PATCH-28064Update for Office 365 Business Edition Monthly Channel for x86 1911 of version(12228.20364)
PATCH-28083Update for Office 365 Monthly Channel Version 1911 (Build 12228.20364)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234