{"id":"CVE-2019-1400","aliases":["EUVD-2019-9957","GHSA-4x3p-hxpv-v3m8"],"status":"published","title":"An information disclosure vulnerability exists in Microsoft Access software when the software...","description":"An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1463.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02312,"percentile":0.83506,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2019-12-10T21:40:56Z","modified":"2026-06-17T02:28:32Z","products":[{"vendor":"microsoft","product":"microsoft office"},{"vendor":"microsoft","product":"office"},{"vendor":"microsoft","product":"office 365 proplus"},{"vendor":"microsoft","product":"office_365_proplus"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1400","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1400"},{"url":"https://github.com/advisories/GHSA-4x3p-hxpv-v3m8"}],"sources":{"cve":[{"id":"CVE-2019-1400","description":"An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1463.","status":"published","published":"2019-12-10T21:40:56Z","modified":"2024-08-04T18:20:26.811Z","updated_at":"2026-11-02T14:20:25.661187Z"}],"euvd":[{"id":"EUVD-2019-9957","description":"An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1463.","status":"published","published":"2019-12-10T21:40:56Z","modified":"2024-08-04T18:20:26Z","updated_at":"2026-11-03T03:06:57.636947Z"}],"ghsa":[{"id":"GHSA-4x3p-hxpv-v3m8","title":"An information disclosure vulnerability exists in Microsoft Access software when the software...","description":"An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1463.","status":"published","published":"2022-05-24T17:03:06Z","modified":"2024-04-04T02:42:30Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:56:11.047077Z"}],"nvd":[{"id":"CVE-2019-1400","description":"An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1463.","status":"published","published":"2019-12-10T22:15:15.963Z","modified":"2026-06-17T02:28:32.49Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:05:40.258829Z"}]}}