CVE-2019-0953 - A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'

Back Back to CVE browser

HIGH

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'

Published May 16, 2019

7.8

HIGH

CVSS 3.0

EPSS 12.93%

Description

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka 'Microsoft Word Remote Code Execution Vulnerability'.

Affected products

Vendor Microsoft Product Microsoft Office Default
n/a
- Version
  2016 for Mac
  Status
  affected
  Constraints
  -
- Version
  2019 for 32-bit editions
  Status
  affected
  Constraints
  -
- Version
  2019 for 64-bit editions
  Status
  affected
  Constraints
  -
- Version
  2019 for Mac
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Microsoft Office Online Server Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Microsoft Word Default
n/a
- Version
  2016 (32-bit edition)
  Status
  affected
  Constraints
  -
- Version
  2016 (64-bit edition)
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Office 365 ProPlus Default
n/a
- Version
  32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  64-bit Systems
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Microsoft Office

n/a

Version	Status	Constraints
2016 for Mac	affected	-
2019 for 32-bit editions	affected	-
2019 for 64-bit editions	affected	-
2019 for Mac	affected	-

Microsoft

Microsoft Office Online Server

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Microsoft Word

n/a

Version	Status	Constraints
2016 (32-bit edition)	affected	-
2016 (64-bit edition)	affected	-

Microsoft

Office 365 ProPlus

n/a

Version	Status	Constraints
32-bit Systems	affected	-
64-bit Systems	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (1)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0953
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0953		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published May 16, 2019

Updated Aug 4, 2024

Reserved Nov 26, 2018

Link CVE-2019-0953

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-0953

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-0953