CVE-2019-1297VulnerabilityPublished 03/03/2022Updated 10/24/2026

CVE-2019-1297: Microsoft Excel Remote Code Execution Vulnerability

Affects Microsoft ExcelSource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/03/2022
KEV deadline: 03/17/2022
EPSS: 21.8% chance of exploitation in 30 days – higher than 97% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2019-1297 (opens in a new tab)

Description

CVE-2019-1297 is a high-severity remote code execution vulnerability in Microsoft Excel caused by improper handling of objects in memory. This flaw allows attackers to execute arbitrary code remotely. The vulnerability has been exploited in the wild, indicating active threat use. No specific affected versions are provided in the available data. No patch or remediation details are included in the input.

Summary

This vulnerability in Microsoft Excel arises from improper memory object handling, enabling remote code execution. Exploitation allows an attacker to run arbitrary code on the affected system. The vulnerability has been observed in active exploitation campaigns. The input data does not specify affected versions or patch availability.

Impact

Successful exploitation can lead to remote code execution, potentially allowing attackers to take control of the affected system. The vulnerability has been exploited in the wild, confirming its practical impact.

Mitigation

Patch status is not yet confirmed — check the Microsoft vendor advisory for current remediation guidance. Until official fixes are confirmed, users should exercise caution when opening Excel files from untrusted sources.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 10:41:15 UTC

References

Related threats