rainbutterfly/cve_corpus huggingface dataset:
CVE-2019-1071 
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1073.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-15T18:56:20.000Z
CVE-2019-1072 
A remote code execution vulnerability exists when Azure DevOps Server and Team Foundation Server (TFS) improperly handle user input, aka 'Azure DevOps Server and Team Foundation Server Remote Code Execution Vulnerability'.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Team Foundation Server 2012
vendor: Microsoft
product: Team Foundation Server 2013 Update 5
vendor: Microsoft
product: Team Foundation Server 2018
vendor: Microsoft
product: Team Foundation Server
vendor: Microsoft
product: Team Foundation Server 2015
vendor: Microsoft
product: Azure DevOps Server
vendor: Microsoft
product: Team Foundation Server 2010
Published: 2019-07-15T18:56:20.000Z
CVE-2019-1073 
An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1071.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-15T18:56:20.000Z
CVE-2019-1074 
An elevation of privilege vulnerability exists in Microsoft Windows where certain folders, with local service privilege, are vulnerable to symbolic link attack. An attacker who successfully exploited this vulnerability could potentially access unauthorized information. The update addresses this vulnerability by not allowing symbolic links in these scenarios., aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1082.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-15T18:56:20.000Z
CVE-2019-1075 
A spoofing vulnerability exists in ASP.NET Core that could lead to an open redirect, aka 'ASP.NET Core Spoofing Vulnerability'.
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: ASP.NET Core
Published: 2019-07-15T18:56:20.000Z
CVE-2019-1076 
A Cross-site Scripting (XSS) vulnerability exists when Team Foundation Server does not properly sanitize user provided input, aka 'Team Foundation Server Cross-site Scripting Vulnerability'.
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Team Foundation Server 2018
vendor: Microsoft
product: Azure DevOps Server
Published: 2019-07-15T18:56:20.000Z
CVE-2019-1077 
An elevation of privilege vulnerability exists when the Visual Studio updater service improperly handles file permissions, aka 'Visual Studio Elevation of Privilege Vulnerability'.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Microsoft Visual Studio 2017
vendor: Microsoft
product: Microsoft Visual Studio 2019
Published: 2019-07-15T18:56:20.000Z
CVE-2019-1079 
An information disclosure vulnerability exists when Visual Studio improperly parses XML input in certain settings files, aka 'Visual Studio Information Disclosure Vulnerability'.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Microsoft Visual Studio
Published: 2019-07-15T18:56:20.000Z
CVE-2019-1080 Scripting Engine Memory Corruption Vulnerability
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Internet Explorer 10
vendor: Microsoft
product: Internet Explorer 9
vendor: Microsoft
product: Internet Explorer 11
CVSS v3.1: version: 3.1
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C
Published: 2019-06-12T13:49:41.000Z
CVE-2019-1081 Microsoft Browser Information Disclosure Vulnerability
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Microsoft Edge (EdgeHTML-based)
vendor: Microsoft
product: Internet Explorer 10
vendor: Microsoft
product: Internet Explorer 9
vendor: Microsoft
product: Internet Explorer 11
CVSS v3.1: version: 3.1
baseSeverity: MEDIUM
baseScore: 4.2
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:P/RL:O/RC:C
Published: 2019-06-12T13:49:41.000Z
CVE-2019-1082 
An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL, with Local Service privilege, is vulnerable to race planting a customized DLL.An attacker who successfully exploited this vulnerability could potentially elevate privilege to SYSTEM.The update addresses this vulnerability by requiring SYSTEM privileges for a certain DLL., aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1074.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
Published: 2019-07-15T18:56:20.000Z
CVE-2019-1084 
An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, when added to conversations, remain invisible. This security update addresses the issue by validating display names upon creation in Microsoft Exchange, and by rendering invalid display names correctly in Microsoft Outlook clients., aka 'Microsoft Exchange Information Disclosure Vulnerability'.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Microsoft Exchange Server
vendor: Microsoft
product: Microsoft Outlook
vendor: Microsoft
product: Microsoft Office
vendor: Microsoft
product: Microsoft Lync
vendor: Microsoft
product: Microsoft Lync Basic
vendor: Microsoft
product: Microsoft Outlook for Android
vendor: Microsoft
product: Skype for Business
vendor: Microsoft
product: Skype for Business Basic
vendor: Microsoft
product: Office 365 ProPlus
vendor: Microsoft
product: Microsoft Exchange Server 2016
vendor: Microsoft
product: Microsoft Exchange Server 2019
vendor: Microsoft
product: Microsoft Exchange Server 2013
vendor: Microsoft
product: Mail and Calendar
vendor: Microsoft
product: Outlook for iOS
Published: 2019-07-15T18:56:21.000Z
CVE-2019-1085 
An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevation of Privilege Vulnerability'.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-15T18:56:21.000Z
CVE-2019-1086 
An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1087, CVE-2019-1088.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-15T18:56:21.000Z
CVE-2019-1087 
An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1086, CVE-2019-1088.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-15T18:56:21.000Z
CVE-2019-1088 
An elevation of privilege exists in Windows Audio Service, aka 'Windows Audio Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1086, CVE-2019-1087.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-15T18:56:21.000Z
CVE-2019-1089 
An elevation of privilege vulnerability exists in rpcss.dll when the RPC service Activation Kernel improperly handles an RPC request. To exploit this vulnerability, a low level authenticated attacker could run a specially crafted application. The security update addresses this vulnerability by correcting how rpcss.dll handles these requests., aka 'Windows RPCSS Elevation of Privilege Vulnerability'.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Multiple
Published: 2019-07-15T18:56:21.000Z
CVE-2019-1090 
An elevation of privilege vulnerability exists in the way that the dnsrslvr.dll handles objects in memory, aka 'Windows dnsrlvr.dll Elevation of Privilege Vulnerability'.
Problem types: description: Elevation of Privilege
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-15T18:56:21.000Z
CVE-2019-1091 
An information disclosure vulnerability exists when Unistore.dll fails to properly handle objects in memory, aka 'Microsoft unistore.dll Information Disclosure Vulnerability'.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-15T18:56:21.000Z
CVE-2019-1092 
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1103, CVE-2019-1106, CVE-2019-1107.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Edge
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: ChakraCore
Published: 2019-07-15T18:56:21.000Z
CVE-2019-1093 
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1097.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-15T18:56:21.000Z
CVE-2019-1094 
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-15T18:56:21.000Z
CVE-2019-1095 
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-15T18:56:21.000Z
CVE-2019-1096 
An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Disclosure Vulnerability'.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-15T18:56:21.000Z
CVE-2019-1097 
An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1093.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-15T18:56:21.000Z
CVE-2019-1098 
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1099, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
Published: 2019-07-29T13:46:48.000Z
CVE-2019-1099 
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1100, CVE-2019-1101, CVE-2019-1116.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
Published: 2019-07-29T13:47:43.000Z
CVE-2019-1100 
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1101, CVE-2019-1116.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
Published: 2019-07-29T13:48:04.000Z
CVE-2019-1101 
An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1094, CVE-2019-1095, CVE-2019-1098, CVE-2019-1099, CVE-2019-1100, CVE-2019-1116.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
Published: 2019-07-29T13:57:32.000Z
CVE-2019-1102 
A remote code execution vulnerability exists in the way that the Windows Graphics Device Interface (GDI) handles objects in the memory, aka 'GDI+ Remote Code Execution Vulnerability'.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-29T13:57:58.000Z
CVE-2019-1103 
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1092, CVE-2019-1106, CVE-2019-1107.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Edge
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: ChakraCore
Published: 2019-07-29T13:58:46.000Z
CVE-2019-1104 
A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Internet Explorer 9
vendor: Microsoft
product: Internet Explorer 11
vendor: Microsoft
product: Internet Explorer 11 on Windows Server 2012
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Internet Explorer 11 on Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Internet Explorer 10
vendor: Microsoft
product: Microsoft Edge
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for ARM64-based Systems
Published: 2019-07-29T14:06:58.000Z
CVE-2019-1105 Outlook for Android Spoofing Vulnerability
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft Outlook for Android
Published: 2019-07-29T14:07:59.000Z
CVE-2019-1106 
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1092, CVE-2019-1103, CVE-2019-1107.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Edge
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: ChakraCore
Published: 2019-07-29T14:08:07.000Z
CVE-2019-1107 
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1062, CVE-2019-1092, CVE-2019-1103, CVE-2019-1106.
Problem types: description: Remote Code Execution
Affected products: vendor: Microsoft
product: Microsoft Edge
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Microsoft Edge on Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: ChakraCore
Published: 2019-07-29T14:08:17.000Z
CVE-2019-1108 
An information disclosure vulnerability exists when the Windows RDP client improperly discloses the contents of its memory, aka 'Remote Desktop Protocol Client Information Disclosure Vulnerability'.
Problem types: description: Information Disclosure
Affected products: vendor: Microsoft
product: Windows
vendor: Microsoft
product: Windows Server
vendor: Microsoft
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
product: Windows Server, version 1903 (Server Core installation)
Published: 2019-07-29T14:08:28.000Z
CVE-2019-1109 
A spoofing vulnerability exists when Microsoft Office Javascript does not check the validity of the web page making a request to Office documents.An attacker who successfully exploited this vulnerability could read or write information in Office documents.The security update addresses the vulnerability by correcting the way that Microsoft Office Javascript verifies trusted web pages., aka 'Microsoft Office Spoofing Vulnerability'.
Problem types: description: Spoofing
Affected products: vendor: Microsoft
product: Microsoft Office
vendor: Microsoft
product: Office 365 ProPlus
Published: 2019-07-29T14:08:33.000Z