Vulnerability Database

299,759

Total vulnerabilities in the database

CVE-2019-0540

A security feature bypass vulnerability exists when Microsoft Office does not validate URLs.An attacker could send a victim a specially crafted file, which could trick the victim into entering credentials, aka 'Microsoft Office Security Feature Bypass Vulnerability'.

  • Published: Mar 5, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-0540
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

Software From Fixed in
microsoft / office 2013-sp1 2013-sp1.x
microsoft / office 2010-sp2 2010-sp2.x
microsoft / office 2013 2013.x
microsoft / office 2016 2016.x
microsoft / office 2019 2019.x