AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-1204

MEDIUM · CVSS 4.3 EPSS 4.42% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-08-14 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2019-1204
Severity
MEDIUM
CVSS
4.3
EPSS
4.42%
Microsoft Office

Original NVD Description

An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validation of the formatting of the messages. An attacker who successfully exploited the vulnerability could attempt to force Outlook to load a local or remote message store (over SMB). To exploit the vulnerability, the attacker could send a specially crafted email to a victim. Outlook would then attempt to open a pre-configured message store contained in the email upon receipt of the email. This update addresses the vulnerability by ensuring Office fully validates incoming email formatting before processing message content.