CVE-2019-1400

5.5 mediumEPSS 2.3%

Medium (5.5) in microsoft. EPSS 2.3% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1463.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS: 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2019-12-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:office
microsoft:office_365_proplus

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1400
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1400

Check your stack JSON