medium5.5
CVE-2019-0540
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which cou…
Impact
A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Excel Viewer | All versions |
| Microsoft | Office | Versions 2010, 2013, 2016, 2019 |
| Microsoft | Office 365 Proplus | All versions |
| Microsoft | Powerpoint Viewer | All versions |
| Microsoft | Word Viewer | All versions |