A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka 'Microsoft Excel Remote Code Execution Vulnerability'.

The Microsoft Office Products are missing security updates.
It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists when     Microsoft Office fails to properly handle certain files.
    (CVE-2019-0801)

  - A remote code execution vulnerability exists in the way     that Microsoft Graphics Components handle objects in     memory. An attacker who successfully exploited the     vulnerability could execute arbitrary code on a target     system.  (CVE-2019-0822)

  - A remote code execution vulnerability exists when the     Microsoft Office Access Connectivity Engine improperly     handles objects in memory. An attacker who successfully     exploited this vulnerability could execute arbitrary     code on a victim system. An attacker could exploit this     vulnerability by enticing a victim to open a specially     crafted file. The update addresses the vulnerability by     correcting the way the Microsoft Office Access     Connectivity Engine handles objects in memory.
    (CVE-2019-0823, CVE-2019-0824, CVE-2019-0825,     CVE-2019-0826, CVE-2019-0827)

  - A remote code execution vulnerability exists in     Microsoft Excel software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights.  (CVE-2019-0828)

The Microsoft Excel Products are missing a security update.
It is, therefore, affected by the following vulnerability :

  - A remote code execution vulnerability exists in     Microsoft Excel software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights.  (CVE-2019-0828)

The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by multiple vulnerabilities:

  - A remote code execution vulnerability exists in Microsoft Excel     software when the software fails to properly handle objects in memory.
    An attacker who successfully exploited the vulnerability could run     arbitrary code in the context of the current user. (CVE-2019-0828)

  - A remote code execution vulnerability exists in the way that     Microsoft Graphics Components handle objects in memory. An attacker     who successfully exploited the vulnerability could execute arbitrary     code on a target system. (CVE-2019-0822)

ID	Name	Product	Family	Severity
162071	Security Updates for Microsoft Office Products C2R (April 2019)	Nessus	Windows	high
162036	Security Updates for Microsoft Excel Products C2R (April 2019)	Nessus	Windows	high
124194	Security Update for Microsoft Office (Apr 2019) (macOS)	Nessus	MacOS X Local Security Checks	high
123952	Security Updates for Microsoft Office Products (April 2019)	Nessus	Windows : Microsoft Bulletins	high
123949	Security Updates for Microsoft Excel Products (April 2019)	Nessus	Windows : Microsoft Bulletins	high

Detections

Analytics

CVE-2019-0828

high

Tenable Plugins

high

high

high

high

high