CVE-2019-1297

Microsoft Excel Remote Code Execution Vulnerability

Exploited in attacks High 8.8 Attack chance: 22%

What it is

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

CISA: A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory.

What to do

Apply updates per vendor instructions.

Deadline for US federal agencies: March 17, 2022

Added to the CISA list: March 3, 2022
Published: September 11, 2019
Severity: High 8.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 22% in the top 2.4% of all known vulnerabilities
More details: NVD · CVE.org · CISA

All references (1)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1297

More exploited flaws from Microsoft

Added	Vulnerability	Product	Severity	Attack chance
Mar 3, 2022	Featheader Record Memory CorruptionCVE-2009-3129	Excel	High 7.8	84%
Mar 3, 2022	Office Security Feature BypassCVE-2016-7262	Excel	High 7.8	58%
Oct 13, 2026	Command InjectionCVE-2026-96951	Windows	High 8.8	9.8%
Sep 25, 2026	Code InjectionCVE-2026-65660	SharePoint	High 8.8	8.2%
Sep 8, 2026	Link FollowingCVE-2026-81963	Windows	High 7.8	0.4%
Sep 8, 2026	Heap-Based Buffer OverflowCVE-2026-85880	Windows	High 7.8	0.4%
Aug 26, 2026	Remote Code ExecutionCVE-2019-1068	SQL Server	High 8.8	57%
Aug 18, 2026	Double FreeCVE-2026-33824	Internet Key Exchange (IKE) Service Extensions	Critical 9.8	77%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.