CVE-2019-0585 — A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Server

Back Back to CVE browser

HIGH

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Server

Published Jan 8, 2019

8.8

HIGH

CVSS 3.0

EPSS 21.97%

Description

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Server.

Affected products

Vendor Microsoft Product Microsoft Office Default
n/a
- Version
  2010 Service Pack 2 (32-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2010 Service Pack 2 (64-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2016 for Mac
  Status
  affected
  Constraints
  -
- Version
  2019 for 32-bit editions
  Status
  affected
  Constraints
  -
- Version
  2019 for 64-bit editions
  Status
  affected
  Constraints
  -
- Version
  2019 for Mac
  Status
  affected
  Constraints
  -
- Version
  Web Apps Server 2010 Service Pack 2
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Microsoft Office Online Server Default
n/a
- Version
  Microsoft Office Online Server
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Microsoft Office Word Viewer Default
n/a
- Version
  Microsoft Office Word Viewer
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Microsoft SharePoint Default
n/a
- Version
  Enterprise Server 2013 Service Pack 1
  Status
  affected
  Constraints
  -
- Version
  Enterprise Server 2016
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Microsoft SharePoint Server Default
n/a
- Version
  2019
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Microsoft Word Default
n/a
- Version
  2010 Service Pack 2 (32-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2010 Service Pack 2 (64-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2013 RT Service Pack 1
  Status
  affected
  Constraints
  -
- Version
  2013 Service Pack 1 (32-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2013 Service Pack 1 (64-bit editions)
  Status
  affected
  Constraints
  -
- Version
  2016 (32-bit edition)
  Status
  affected
  Constraints
  -
- Version
  2016 (64-bit edition)
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Office Default
n/a
- Version
  365 ProPlus for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  365 ProPlus for 64-bit Systems
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Word Default
n/a
- Version
  Automation Services on Microsoft SharePoint Server 2010 Service Pack 2
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Microsoft Office

n/a

Version	Status	Constraints
2010 Service Pack 2 (32-bit editions)	affected	-
2010 Service Pack 2 (64-bit editions)	affected	-
2016 for Mac	affected	-
2019 for 32-bit editions	affected	-
2019 for 64-bit editions	affected	-
2019 for Mac	affected	-
Web Apps Server 2010 Service Pack 2	affected	-

Microsoft

Microsoft Office Online Server

n/a

Version	Status	Constraints
Microsoft Office Online Server	affected	-

Microsoft

Microsoft Office Word Viewer

n/a

Version	Status	Constraints
Microsoft Office Word Viewer	affected	-

Microsoft

Microsoft SharePoint

n/a

Version	Status	Constraints
Enterprise Server 2013 Service Pack 1	affected	-
Enterprise Server 2016	affected	-

Microsoft

Microsoft SharePoint Server

n/a

Version	Status	Constraints
2019	affected	-

Microsoft

Microsoft Word

n/a

Version	Status	Constraints
2010 Service Pack 2 (32-bit editions)	affected	-
2010 Service Pack 2 (64-bit editions)	affected	-
2013 RT Service Pack 1	affected	-
2013 Service Pack 1 (32-bit editions)	affected	-
2013 Service Pack 1 (64-bit editions)	affected	-
2016 (32-bit edition)	affected	-
2016 (64-bit edition)	affected	-

Microsoft

Office

n/a

Version	Status	Constraints
365 ProPlus for 32-bit Systems	affected	-
365 ProPlus for 64-bit Systems	affected	-

Microsoft

Word

n/a

Version	Status	Constraints
Automation Services on Microsoft SharePoint Server 2010 Service Pack 2	affected	-

Remediation

No remediation recorded yet.

Metrics

21.97% 0.21967

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.21967

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (52 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	21.97% (0.21967)	97.59th	v5 (v2026.06.15)
Sep 22, 2026	21.97% (0.21967)	97.55th	v5 (v2026.06.15)
Sep 21, 2026	19.84% (0.19843)	97.35th	v5 (v2026.06.15)
Sep 6, 2026	21.97% (0.21967)	97.49th	v5 (v2026.06.15)
Sep 5, 2026	19.84% (0.19843)	97.29th	v5 (v2026.06.15)
Aug 30, 2026	21.97% (0.21967)	97.48th	v5 (v2026.06.15)
Aug 28, 2026	19.84% (0.19843)	97.28th	v5 (v2026.06.15)
Aug 24, 2026	21.97% (0.21967)	97.47th	v5 (v2026.06.15)
Aug 23, 2026	19.84% (0.19843)	97.27th	v5 (v2026.06.15)
Aug 4, 2026	21.97% (0.21967)	97.42th	v5 (v2026.06.15)
Jul 28, 2026	20.71% (0.20713)	97.28th	v5 (v2026.06.15)
Jul 26, 2026	18.81% (0.18812)	96.98th	v5 (v2026.06.15)
Jul 13, 2026	20.71% (0.20713)	97.24th	v5 (v2026.06.15)
Jun 15, 2026	21.97% (0.21967)	97.34th	v5 (v2026.06.15)
May 29, 2026	22.78% (0.22777)	95.97th	v4 (v2025.03.14)
Dec 28, 2025	28.16% (0.28156)	96.32th	v4 (v2025.03.14)
Dec 27, 2025	30.34% (0.30341)	96.55th	v4 (v2025.03.14)
Dec 21, 2025	28.16% (0.28156)	96.32th	v4 (v2025.03.14)
Dec 13, 2025	32.66% (0.32660)	96.69th	v4 (v2025.03.14)
Nov 3, 2025	30.34% (0.30341)	96.50th	v4 (v2025.03.14)
Jun 11, 2025	32.91% (0.32912)	96.65th	v4 (v2025.03.14)
Mar 30, 2025	37.25% (0.37247)	96.85th	v4 (v2025.03.14)
Mar 29, 2025	42.89% (0.42894)	96.23th	v4 (v2025.03.14)
Mar 17, 2025	37.25% (0.37247)	96.81th	v4 (v2025.03.14)
Dec 18, 2024	10.23% (0.10230)	94.94th	v3 (v2023.03.01)
Dec 17, 2024	11.29% (0.11294)	95.17th	v3 (v2023.03.01)
Nov 17, 2024	25.70% (0.25699)	96.85th	v3 (v2023.03.01)
Oct 23, 2024	23.46% (0.23459)	96.68th	v3 (v2023.03.01)
Sep 23, 2024	29.85% (0.29854)	96.98th	v3 (v2023.03.01)
Aug 27, 2024	23.46% (0.23459)	96.65th	v3 (v2023.03.01)
Jun 21, 2024	18.02% (0.18017)	96.20th	v3 (v2023.03.01)
May 31, 2024	19.25% (0.19255)	96.27th	v3 (v2023.03.01)
Apr 18, 2024	19.95% (0.19945)	96.27th	v3 (v2023.03.01)
Jan 20, 2024	18.65% (0.18649)	95.78th	v3 (v2023.03.01)
Jan 2, 2024	23.29% (0.23293)	96.10th	v3 (v2023.03.01)
Oct 9, 2023	29.66% (0.29663)	96.34th	v3 (v2023.03.01)
Aug 4, 2023	23.29% (0.23293)	95.92th	v3 (v2023.03.01)
Jul 22, 2023	23.82% (0.23817)	95.96th	v3 (v2023.03.01)
Jun 21, 2023	23.29% (0.23293)	95.87th	v3 (v2023.03.01)
Mar 7, 2023	27.06% (0.27062)	96.01th	v3 (v2023.03.01)
Mar 6, 2023	13.37% (0.13370)	95.72th	v2 (v2022.01.01)
Feb 8, 2023	13.37% (0.13370)	95.55th	v2 (v2022.01.01)
Dec 25, 2022	12.68% (0.12683)	95.45th	v2 (v2022.01.01)
Nov 21, 2022	10.70% (0.10702)	94.53th	v2 (v2022.01.01)
Oct 15, 2022	8.36% (0.08358)	93.39th	v2 (v2022.01.01)
Jul 5, 2022	7.62% (0.07619)	92.43th	v2 (v2022.01.01)
Apr 1, 2022	5.96% (0.05960)	89.66th	v2 (v2022.01.01)
Feb 4, 2022	46.11% (0.46114)	97.85th	v2 (v2022.01.01)
Feb 3, 2022	41.68% (0.41682)	98.67th	v1
Jan 6, 2022	41.68% (0.41682)	98.65th	v1
Sep 1, 2021	13.74% (0.13741)	96.74th	v1
Apr 14, 2021	13.74% (0.13741)	0.00th	v1

Weaknesses (0)

No CWE recorded.

References (2)

http://www.securityfocus.com/bid/106392
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0585
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/106392		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0585		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Jan 8, 2019

Updated Aug 4, 2024

Reserved Nov 26, 2018

Link CVE-2019-0585

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-0585

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-0585