CVE-2019-0826

CVE-2019-0826 describes a remote code execution vulnerability within the Microsoft Office Access Connectivity Engine, affecting Microsoft Office and Office 365 ProPlus. This flaw stems from improper memory handling, allowing an attacker to execute arbitrary code. With a CVSS score of 7.8 (High), it requires user interaction (e.g., opening a malicious file) but can lead to full compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), and community discussion and media coverage are minimal, suggesting limited active exploitation.