Security Feature Bypass in Microsoft Office Click-to-Run Components

CVE-2019-1449

Summary

A security feature bypass vulnerability in Microsoft Office Click-to-Run components allows attackers to exploit specially crafted files. This flaw could enable a standard user, any AppContainer sandbox, or Office LPAC Protected View to escalate privileges to SYSTEM. To successfully execute this exploit, an attacker must run a manipulated file, potentially compromising the security of the application and system.

References