CVE-2019-1084

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2019
Source publication: Jul 15, 2019
Source updated: Aug 4, 2024
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, when added to conversations, remain invisible. This security update addresses the issue by validating display names upon creation in Microsoft Exchange, and by rendering invalid display names correctly in Microsoft Outlook clients., aka 'Microsoft Exchange Information Disclosure Vulnerability'.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Microsoft Exchange Server

Vendor: Microsoft
Product: Microsoft Exchange Server
Platforms: Unknown
Default status: Unknown

Microsoft Exchange Server · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2010 Service Pack 3	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft Outlook

Vendor: Microsoft
Product: Microsoft Outlook
Platforms: Unknown
Default status: Unknown

Microsoft Outlook · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2010 Service Pack 2 (32-bit editions)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2010 Service Pack 2 (64-bit editions)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2016 (32-bit edition)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2016 (64-bit edition)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2013 Service Pack 1 (32-bit editions)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2013 Service Pack 1 (64-bit editions)	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft Office

Vendor: Microsoft
Product: Microsoft Office
Platforms: Unknown
Default status: Unknown

Microsoft Office · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2013 Service Pack 1 (32-bit editions)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2013 Service Pack 1 (64-bit editions)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2013 RT Service Pack 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
2016 for Mac	`affected`	Unavailable	Unavailable	Unavailable	None listed
2016 (32-bit edition)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2016 (64-bit edition)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2019 for 32-bit editions	`affected`	Unavailable	Unavailable	Unavailable	None listed
2019 for 64-bit editions	`affected`	Unavailable	Unavailable	Unavailable	None listed
2019 for Mac	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft Lync

Vendor: Microsoft
Product: Microsoft Lync
Platforms: Unknown
Default status: Unknown

Microsoft Lync · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2013 Service Pack 1 (32-bit)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2013 Service Pack 1 (64-bit)	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft Lync Basic

Vendor: Microsoft
Product: Microsoft Lync Basic
Platforms: Unknown
Default status: Unknown

Microsoft Lync Basic · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2013 Service Pack 1 (32-bit)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2013 Service Pack 1 (64-bit)	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft Outlook for Android

Vendor: Microsoft
Product: Microsoft Outlook for Android
Platforms: Unknown
Default status: Unknown

Microsoft Outlook for Android · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	Unavailable	Unavailable	Unavailable	None listed

Skype for Business

Vendor: Microsoft
Product: Skype for Business
Platforms: Unknown
Default status: Unknown

Skype for Business · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2016 (32-bit)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2016 (64-bit)	`affected`	Unavailable	Unavailable	Unavailable	None listed

Skype for Business Basic

Vendor: Microsoft
Product: Skype for Business Basic
Platforms: Unknown
Default status: Unknown

Skype for Business Basic · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
2016 (32-bit)	`affected`	Unavailable	Unavailable	Unavailable	None listed
2016 (64-bit)	`affected`	Unavailable	Unavailable	Unavailable	None listed

Office 365 ProPlus

Vendor: Microsoft
Product: Office 365 ProPlus
Platforms: Unknown
Default status: Unknown

Office 365 ProPlus · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
32-bit Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed
64-bit Systems	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft Exchange Server 2016

Vendor: Microsoft
Product: Microsoft Exchange Server 2016
Platforms: Unknown
Default status: Unknown

Microsoft Exchange Server 2016 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Cumulative Update 12	`affected`	Unavailable	Unavailable	Unavailable	None listed
Cumulative Update 13	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft Exchange Server 2019

Vendor: Microsoft
Product: Microsoft Exchange Server 2019
Platforms: Unknown
Default status: Unknown

Microsoft Exchange Server 2019 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Cumulative Update 1	`affected`	Unavailable	Unavailable	Unavailable	None listed
Cumulative Update 2	`affected`	Unavailable	Unavailable	Unavailable	None listed

Microsoft Exchange Server 2013

Vendor: Microsoft
Product: Microsoft Exchange Server 2013
Platforms: Unknown
Default status: Unknown

Microsoft Exchange Server 2013 · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
Cumulative Update 23	`affected`	Unavailable	Unavailable	Unavailable	None listed

Mail and Calendar

Vendor: Microsoft
Product: Mail and Calendar
Platforms: Unknown
Default status: Unknown

Mail and Calendar · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	Unavailable	Unavailable	Unavailable	None listed

Outlook for iOS

Vendor: Microsoft
Product: Outlook for iOS
Platforms: Unknown
Default status: Unknown

Outlook for iOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
unspecified	`affected`	Unavailable	Unavailable	Unavailable	None listed