CVE-2019-1084
Quick assessment
Affected
Microsoft Microsoft Exchange Server
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Microsoft Exchange Server是美国微软（Microsoft）公司的一套电子邮件服务程序。它提供邮件存取、储存、转发，语音邮件，邮件过滤筛选等功能。 Microsoft Exchange中存在信息泄露漏洞。攻击者可利用该漏洞获取敏感信息。以下产品及版本受到影响：Microsoft Exchange Server 2010 SP3，Exchange Server 2013 Cumulative Update 23，Exchange Server 2016 Cumulative Updat
Possible ATT&CK Techniques 2 AI
T1567.001 · Exfiltration to Code Repository T1567 · Exfiltration Over Web Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2019-1084
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, when added to conversations, remain invisible. This security update addresses the issue by validating display names upon creation in Microsoft Exchange, and by rendering invalid display names correctly in Microsoft Outlook clients., aka 'Microsoft Exchange Information Disclosure Vulnerability'.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Exchange Server 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Exchange Server是美国微软（Microsoft）公司的一套电子邮件服务程序。它提供邮件存取、储存、转发，语音邮件，邮件过滤筛选等功能。 Microsoft Exchange中存在信息泄露漏洞。攻击者可利用该漏洞获取敏感信息。以下产品及版本受到影响：Microsoft Exchange Server 2010 SP3，Exchange Server 2013 Cumulative Update 23，Exchange Server 2016 Cumulative Updat
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Microsoft Exchange Server | 2010 Service Pack 3 | - |
|
| Microsoft | Microsoft Outlook | 2010 Service Pack 2 (32-bit editions) | - |
|
| Microsoft | Microsoft Office | 2013 Service Pack 1 (32-bit editions) | - |
|
| Microsoft | Microsoft Lync | 2013 Service Pack 1 (32-bit) | - |
|
| Microsoft | Microsoft Lync Basic | 2013 Service Pack 1 (32-bit) | - |
|
| Microsoft | Microsoft Outlook for Android | unspecified | - |
|
| Microsoft | Skype for Business | 2016 (32-bit) | - |
|
| Microsoft | Skype for Business Basic | 2016 (32-bit) | - |
|
| Microsoft | Office 365 ProPlus | 32-bit Systems | - |
|
| Microsoft | Microsoft Exchange Server 2016 | Cumulative Update 12 | - |
|
| Microsoft | Microsoft Exchange Server 2019 | Cumulative Update 1 | - |
|
| Microsoft | Microsoft Exchange Server 2013 | Cumulative Update 23 | - |
|
| Microsoft | Mail and Calendar | unspecified | - |
|
| Microsoft | Outlook for iOS | unspecified | - |
|
II. Public POCs for CVE-2019-1084
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-1084
请登录查看更多情报信息。
Vendor Advisories for CVE-2019-1084 (1)
Same Patch Batch · Microsoft · 2019-07-15 · 43 CVEs total
| CVE-2019-1087 | Microsoft Windows Audio Service 权限许可和访问控制问题漏洞 | |
| CVE-2019-1073 | Microsoft Windows Kernel 信息泄露漏洞 | |
| CVE-2019-1090 | Microsoft Windows 权限许可和访问控制问题漏洞 | |
| CVE-2019-1089 | Microsoft Windows 权限许可和访问控制问题漏洞 | |
| CVE-2019-1091 | Microsoft Windows 信息泄露漏洞 | |
| CVE-2019-1094 | Microsoft Windows Graphics Device Interface 信息泄露漏洞 | |
| CVE-2019-1095 | Microsoft Windows Graphics Device Interface 信息泄露漏洞 | |
| CVE-2019-1096 | Microsoft win32k 信息泄露漏洞 | |
| CVE-2019-1097 | Microsoft DirectWrite 信息泄露漏洞 | |
| CVE-2019-1093 | Microsoft DirectWrite 信息泄露漏洞 | |
| CVE-2019-1088 | Microsoft Windows Audio Service 权限许可和访问控制问题漏洞 | |
| CVE-2019-1086 | Microsoft Windows Audio Service 权限许可和访问控制问题漏洞 | |
| CVE-2019-1085 | Microsoft Windows 权限许可和访问控制问题漏洞 | |
| CVE-2019-1083 | Microsoft .NET Framework 代码问题漏洞 | |
| CVE-2019-1082 | Microsoft Windows 权限许可和访问控制问题漏洞 | |
| CVE-2019-1079 | Microsoft Visual Studio 信息泄露漏洞 | |
| CVE-2019-1077 | Microsoft Visual Studio 权限许可和访问控制问题漏洞 | |
| CVE-2019-1076 | Microsoft Azure DevOps Server和Team Foundation Server 跨站脚本漏洞 | |
| CVE-2019-1075 | Microsoft ASP.NET Core 输入验证错误漏洞 | |
| CVE-2019-1074 | Microsoft Windows 权限许可和访问控制问题漏洞 |
Showing top 20 of 43 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: Microsoft
-
CVE-2026-96940
Microsoft Exchange Server Elevation of Privilege Vulnerabili -
CVE-2026-100208
Microsoft Office Outlook Remote Code Execution Vulnerability -
CVE-2026-70125
Microsoft Office Outlook Remote Code Execution Vulnerability -
CVE-2026-88097
Microsoft Edge (Chromium-based) Elevation of Privilege Vulne -
CVE-2026-85887
M365 Copilot Information Disclosure Vulnerability
V. Comments for CVE-2019-1084
No comments yet