CVE-2019-1297

Microsoft Excel contained an unpatched remote code execution vulnerability that was actively exploited in the wild.

Microsoft Excel failed to properly handle objects in memory, allowing remote code execution. DIB organizations must ensure all Microsoft products are patched promptly, as unpatched RCE vulnerabilities are frequently exploited by threat actors to compromise systems and exfiltrate data.

Shame score — A known RCE vulnerability in a widely used productivity tool remained unpatched and was actively exploited in the wild, demonstrating a failure in timely patch management and leaving systems exposed to remote attackers.