CVE-2019-1297

CVE-2019-1297 is a remote code execution vulnerability in Microsoft Excel, Microsoft Office, and Office 365 ProPlus, stemming from improper memory object handling. This high-severity vulnerability (CVSS 8.8) can be exploited remotely with low attack complexity, potentially leading to complete compromise of confidentiality, integrity, and availability. It is actively exploited in the wild, as indicated by its presence in the KEV catalog, and has garnered significant community discussion and media coverage. While no public exploit code is listed for Metasploit, Nuclei, or ExploitDB, its active exploitation underscores the critical need for patching.