CVE-2019-1265 — A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune MAM Policy.This could allow an attacker to perform functions that are restricted by Intune Policy.The security update addresses the vulnerability by correcting the way the policy is applied to Yammer App., aka 'Microsoft Yammer Security Feature Bypass Vulnerability'

Back Back to CVE browser

HIGH

A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune MAM Policy.This could allow an attacker to perform functions that are restricted by Intune Policy.The security update addresses the vulnerability by correcting the way the policy is applied to Yammer App., aka 'Microsoft Yammer Security Feature Bypass Vulnerability'

Published Sep 11, 2019

7.5

HIGH

CVSS 3.1

EPSS 3.37%

Description

A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune MAM Policy.This could allow an attacker to perform functions that are restricted by Intune Policy.The security update addresses the vulnerability by correcting the way the policy is applied to Yammer App., aka 'Microsoft Yammer Security Feature Bypass Vulnerability'.

Affected products

Vendor Microsoft Product Yammer for Android Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Yammer for Android

n/a

Version	Status	Constraints
unspecified	affected	-

Remediation

No remediation recorded yet.

Metrics

3.37% 0.03366

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.03366

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (17 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	3.37% (0.03366)	88.35th	v5 (v2026.06.15)
Jun 15, 2026	3.14% (0.03142)	86.19th	v5 (v2026.06.15)
Mar 30, 2025	5.03% (0.05034)	88.76th	v4 (v2025.03.14)
Mar 29, 2025	10.28% (0.10276)	88.52th	v4 (v2025.03.14)
Mar 17, 2025	4.10% (0.04097)	87.83th	v4 (v2025.03.14)
Dec 12, 2024	0.17% (0.00174)	55.79th	v3 (v2023.03.01)
Jan 24, 2024	0.18% (0.00177)	55.04th	v3 (v2023.03.01)
Apr 8, 2023	0.17% (0.00174)	52.95th	v3 (v2023.03.01)
Mar 7, 2023	0.17% (0.00167)	51.61th	v3 (v2023.03.01)
Mar 6, 2023	2.87% (0.02868)	83.23th	v2 (v2022.01.01)
Aug 20, 2022	2.87% (0.02868)	82.35th	v2 (v2022.01.01)
Apr 1, 2022	2.63% (0.02632)	80.45th	v2 (v2022.01.01)
Feb 4, 2022	23.96% (0.23965)	95.14th	v2 (v2022.01.01)
Feb 3, 2022	17.64% (0.17642)	92.83th	v1
Jan 6, 2022	17.64% (0.17642)	92.74th	v1
Sep 1, 2021	4.56% (0.04557)	86.26th	v1
Apr 14, 2021	4.56% (0.04557)	0.00th	v1

Weaknesses (0)

No CWE recorded.

References (1)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1265
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1265		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Sep 11, 2019

Updated Aug 4, 2024

Reserved Nov 26, 2018

Link CVE-2019-1265

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-1265

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-1265