Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Office 365 Proplus
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-1449 1 Microsoft 2 Office, Office 365 Proplus 2020-08-24 10.0 HIGH 9.8 CRITICAL
A security feature bypass vulnerability exists in the way that Office Click-to-Run (C2R) components handle a specially crafted file, which could lead to a standard user, any AppContainer sandbox, and Office LPAC Protected View to escalate privileges to SYSTEM.To exploit this bug, an attacker would have to run a specially crafted file, aka 'Microsoft Office ClickToRun Security Feature Bypass Vulnerability'.