MS.Excel.CVE-2019-1112.Security.Bypass

Description

This indicates an attack attempt to exploit a Security Bypass vulnerability in Microsoft Office Excel.
The vulnerability is due to a parsing issue in MS office Excel while handling a malicious XLS file. A remote attacker can exploit this to bypass security mitigation on the target system via a crafted XLS file.

Affected Products

Microsoft Office 2019 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Office 365 ProPlus for 32-bit Systems
Office 365 ProPlus for 64-bit Systems

Impact

Security Bypass: Remote attackers can bypass security mechanism on vulnerable systems

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1112

References