CVE-2019-0561

EUVD-2019-1331
An information disclosure vulnerability exists when Microsoft Word macro buttons are used improperly, aka "Microsoft Word Information Disclosure Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office, Word.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
Affected Products (NVD)
VendorProductVersion
microsoftoffice_365_proplus
-
microsoftword_automation_services
-
𝑥
= Vulnerable software versions
References
http://www.securityfocus.com/bid/106399
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0561
http://www.securityfocus.com/bid/106399
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0561