CVE-2019-1199

CVE-2019-1199 is a remote code execution vulnerability in Microsoft Outlook and Office 365 ProPlus, stemming from improper memory object handling. It carries a CVSS score of 7.8 (HIGH) and a FAUCET Risk Score of 81/100, indicating significant severity. Exploitation requires user interaction, typically opening a specially crafted file, and can lead to arbitrary code execution in the context of the current user, potentially allowing full system control if the user has administrative rights. While the Preview Pane can be an attack vector, there is no evidence of active exploitation, nor are there known public exploits in Metasploit or ExploitDB, despite moderate community discussion and media coverage.