CVE-2019-1449

Name of the Vulnerable Software and Affected Versions Microsoft Office and Office 365 (affected versions not specified)

Description The issue is related to insecure privilege management in the Click-to-Run (C2R) component of Microsoft Office and Office 365. It allows a remote attacker to escalate privileges using a specially crafted file. This could lead to a standard user gaining SYSTEM privileges, bypassing security features such as AppContainer sandbox and Office LPAC Protected View.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.