CVE-2019-1400

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists in Microsoft Access software when the software fails to properly handle objects in memory, aka 'Microsoft Access Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1463.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Dec 10, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-140007.8Lack of check that the RX FIFO write index that is read from shared RAM is less than the FIFO size results into memory corruption and potent CVE-2019-140017.8Wrong public key usage from existing oem_keystore for hash generation in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT CVE-2019-140027.8APKs without proper permission may bind to CallEnhancementService and can lead to unauthorized access to call status in Snapdragon Auto, Sna CVE-2019-140037.5Null pointer exception can happen while parsing invalid MKV clip where cue information is parsed before segment information in Snapdragon Au CVE-2019-140049.8Buffer overflow occurs while processing invalid MKV clip, which has invalid EBML size in Snapdragon Auto, Snapdragon Compute, Snapdragon Con CVE-2019-140059.8Buffer overflow occur while playing the clip which is nonstandard due to lack of check of size duration in Snapdragon Auto, Snapdragon Compu CVE-2019-140069.8Buffer overflow occur while playing the clip which is nonstandard due to lack of offset length check in Snapdragon Auto, Snapdragon Compute,CVE-2019-140075.5Due to the use of non-time-constant comparison functions there is issue in timing side channels which can be used as a potential side channe CVE-2019-140087.5Possible null pointer dereference issue in location assistance data processing due to missing null check on resources before using it in Sna CVE-2019-140097.8Out of bound memory access while processing TZ command handler due to improper input validation on response length received from user in Sna CVE-2019-140107.5The device may enter into error state when some tool or application gets failure at 1st buffer map all and performs 2nd buffer map which hap CVE-2019-140119.1Multiple Read overflows issue due to improper length check while decoding 3G attach accept/ SMS/ pdn connection reject/ esm data transport/