Vulnerability Details : CVE-2019-0560
An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office.
Vulnerability category: Information leak
Products affected by CVE-2019-0560
- cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:rt:*:*:*
- cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-0560
6.44%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 93 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-0560
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:N/A:N |
8.6
|
2.9
|
NIST | |
|
5.5
|
MEDIUM | CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
1.8
|
3.6
|
NIST |
References for CVE-2019-0560
-
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0560
CVE-2019-0560 | Microsoft Office Information Disclosure VulnerabilityPatch;Vendor Advisory
-
http://www.securityfocus.com/bid/106398
Microsoft Office CVE-2019-0560 Information Disclosure VulnerabilityThird Party Advisory;VDB Entry
Jump to