Microsoft Outlook Elevation of Privilege Vulnerability
Priority LOW 27CWE-20Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA.
Summary
An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validation of the formatting of the messages. An attacker who successfully exploited the vulnerability could attempt to force Outlook to load a local or remote message store (over SMB). To exploit the vulnerability, the attacker could send a specially crafted email to a victim. Outlook would then attempt to open a pre-configured message store contained in the email upon receipt of the email. This update addresses the vulnerability by ensuring Office fully validates incoming email formatting before processing message content.
Why it matters now
EPSS 0.04423 91st percentileScored 2026-11-07
Fix Fixed Microsoft Office 2019 (Microsoft): https://aka.ms/OfficeSecurityReleasesOffice 365 ProPlus (Microsoft): publication+3 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Microsoft | Microsoft Office 2019 | 19.0.0 to before https://aka.ms/OfficeSecurityReleases | https://aka.ms/OfficeSecurityReleases | Patch available | CNA |
| Microsoft | Office 365 ProPlus | 16.0.0 to before publication | publication | Patch available | CNA |
| Microsoft | Microsoft Outlook 2016 | 16.0.0.0 to before publication | publication | Patch available | CNA |
| Microsoft | Microsoft Outlook 2013 Service Pack 1 | 15.0.0.0 to before publication | publication | Patch available | CNA |
| Microsoft | Microsoft Outlook 2010 Service Pack 2 | 13.0.0.0 to before publication | publication | Patch available | CNA |
- Microsoft Office 2019 VendorMicrosoft Affected 19.0.0 to before https://aka.ms/OfficeSecurityReleases Fixed in https://aka.ms/OfficeSecurityReleases Patch available CNA
- Office 365 ProPlus VendorMicrosoft Affected 16.0.0 to before publication Fixed in publication Patch available CNA
- Microsoft Outlook 2016 VendorMicrosoft Affected 16.0.0.0 to before publication Fixed in publication Patch available CNA
- Microsoft Outlook 2013 Service Pack 1 VendorMicrosoft Affected 15.0.0.0 to before publication Fixed in publication Patch available CNA
- Microsoft Outlook 2010 Service Pack 2 VendorMicrosoft Affected 13.0.0.0 to before publication Fixed in publication Patch available CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:* | 2019 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:* | 2010 sp2 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:* | 2013 sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:rt:*:*:* | 2013 sp1 | Vulnerable | Microsoft |
| cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:* | 2016 | Vulnerable | Microsoft |
- cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:* Versions 2019 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:* Versions 2010 sp2 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:*:*:*:* Versions 2013 sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:rt:*:*:* Versions 2013 sp1 Vulnerable ·Microsoft
- cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:* Versions 2016 Vulnerable ·Microsoft
Remediation
- Fix · CNA Microsoft Office 2019 (Microsoft) Fixed in https://aka.ms/OfficeSecurityReleases
- Fix · CNA Office 365 ProPlus (Microsoft) Fixed in publication
- Fix · CNA Microsoft Outlook 2016 (Microsoft) Fixed in publication
- Fix · CNA Microsoft Outlook 2013 Service Pack 1 (Microsoft) Fixed in publication
- Fix · CNA Microsoft Outlook 2010 Service Pack 2 (Microsoft) Fixed in publication
Timeline
- 2026-10-02 Threatist record created from CVE-2019-1204
- 2026-10-03 Alias added: GHSA-c2cv-vhh7-5wqr
More Microsoft Office vulnerabilities
- TI-2023-09240 Microsoft Outlook Elevation of Privilege Vulnerability KEVCVSS 3.1CRITICAL 9.8
- TI-2019-01013 A remote code execution vulnerability exists in Microsoft Excel software when the… KEVCVSS 3.1HIGH 8.8
- TI-2019-00335 Command injection in Microsoft Office KEVCVSS 3.1HIGH 8.8
- TI-2018-00739 Out-of-bounds write in Microsoft Equation Editor KEVCVSS 3.1HIGH 8.8
- TI-2015-02130 Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2… KEVCVSS 3.1HIGH 8.8
- TI-2015-01588 Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary… KEVCVSS 3.1HIGH 8.8
Sources
- CVE-2019-1204 · CVE Program
- CVE-2019-1204 · NVD
- FIRST EPSS
- GHSA-c2cv-vhh7-5wqr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences