CVE-2019-1084

CVE-2019-1084 is an information disclosure vulnerability in Microsoft Exchange, affecting various Microsoft products including Exchange Server, Outlook, and Skype for Business. An authenticated attacker could exploit this by creating entities with non-printable characters in their display names, making them invisible in conversations. This medium-severity vulnerability (CVSS 6.5) has a low attack complexity and could lead to high confidentiality impact, allowing for hidden communication channels. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered some community discussion and media coverage.