CVE-2019-0540

A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which…

published March 6, 2019

CVSS
—
EPSS
13%
Percentile
96.3
In the wild
Unconfirmed
What it is

A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.12783 · 96.3th percentile
Published
2019-03-06T00:00Z
EPSS history
Timeline
  • 06 MAR 00:00Z
    A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which…
    cvelistv5