High severity8.8NVD Advisory· Published Jan 8, 2019· Updated Jun 17, 2026

CVE-2019-0585

Description

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft SharePoint, Microsoft Office Online Server, Microsoft Word, Microsoft SharePoint Server.

Affected products

Microsoft/Sharepoint Serverllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 2019
Microsoft/Wordllm-fuzzy3 versions
(expand)+ 2 more
- (no CPE)
- (no CPE)range: Automation Services on Microsoft SharePoint Server 2010 Service Pack 2
- (no CPE)range: 2010 Service Pack 2 (32-bit editions)
Microsoft/Officellm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 365 ProPlus for 32-bit Systems
Microsoft/Office Visiocpe-rescue
Range: 2010 Service Pack 2 (32-bit editions)
Microsoft/Office Online Servercpe-rescue
Range: Microsoft Office Online Server
Microsoft/Word Viewercpe-rescue
Range: Microsoft Office Word Viewer
Microsoft/Office SharePointcpe-rescue
Range: Enterprise Server 2013 Service Pack 1

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0585nvdPatchVendor Advisory
www.securityfocus.com/bid/106392nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.018
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000