CVE-2019-1209

CVE-2019-1209 is an information disclosure vulnerability affecting Microsoft Lync 2013. This medium-severity vulnerability (CVSS 6.5) can be exploited remotely with low attack complexity, requiring user interaction, to achieve high confidentiality impact by disclosing sensitive information. While there is no evidence of active exploitation or publicly available exploit code, the vulnerability has garnered some community discussion and media coverage.