<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p> <p>To exploit the vulnera
<p>An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.</p> <p>To exploit the vulnerability, an attacker could craft a special document file and then convince the user to open it. An attacker must know the memory address…
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Microsoft SharePoint Enterprise Server 2013 Service Pack 1 | 15.0.0 |
| Microsoft | Microsoft Office 2019 | 19.0.0 |
| Microsoft | Microsoft Office 2019 for Mac | 16.0.0 |
| Microsoft | Microsoft Office Online Server | 16.0.1 |
| Microsoft | Microsoft 365 Apps for Enterprise | 16.0.1 |
| Microsoft | Microsoft Excel 2016 | 16.0.0.0 |
| Microsoft | Microsoft Office 2016 for Mac | 16.0.0 |
| Microsoft | Microsoft Excel 2010 Service Pack 2 | 13.0.0.0 |
| Microsoft | Microsoft Excel 2013 Service Pack 1 | 15.0.0.0 |
| Microsoft | Microsoft Office Web Apps 2013 Service Pack 1 | 15.0.0.0 |
Not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog. EPSS is the best forward-looking signal — see the EPSS row above.
For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.
Ask SARA in chat to draft a starting detection for this CVE in your stack of choice.
No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.