How severe is CVE-2019-0801?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.8 out of 10.

What type of vulnerability is CVE-2019-0801?

This is classified as CWE-19, which is a common weakness in software security.

CVE-2019-0801 - HIGH Severity | CVSS 7.8

Vulnerability Description

A remote code execution vulnerability exists when Microsoft Office fails to properly handle certain files.To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted URL file that points to an Excel or PowerPoint file that was also downloaded.The update addresses the vulnerability by correcting how Office handles these files., aka 'Office Remote Code Execution Vulnerability'.

Related Vulnerabilities

CVE-2014-9803

HIGH

CVSS:7.8(High)

arch/arm64/include/asm/pgtable.h in the Linux kernel before 3.15-rc5-next-20140519, as used in Android before 2016-07-05 on Nexus 5X and 6P devices, mishandles execute-only pages, which allows attacke...

CWE-192014

CVE-2014-9877

HIGH

CVSS:7.8(High)

drivers/media/platform/msm/camera_v2/sensor/actuator/msm_actuator.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 (2013) devices mishandles a user-space pointer, which allow...

CWE-192014

CVE-2015-0854

HIGH

CVSS:7.8(High)

App/HelperFunctions.pm in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Show in Folder" action.

CWE-192015

CVE-2015-8937

HIGH

CVSS:7.8(High)

drivers/char/diag/diagchar_core.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5, 6, and 7 (2013) devices mishandles a socket process, which allows attackers to gain privileges via...

CWE-192015

CVE-2016-10081

HIGH

CVSS:7.8(High)

/usr/bin/shutter in Shutter through 0.93.1 allows user-assisted remote attackers to execute arbitrary commands via a crafted image name that is mishandled during a "Run a plugin" action.

CWE-192016

CVE-2016-3231

HIGH

CVSS:7.8(High)

The Standard Collector service in Windows Diagnostics Hub mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of P...

CWE-192016