Skip to content

CVE-2018-8147 A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This a...

HighCVSS 7.8 EPSS 24.3%
Published
Updated
Exploit status
No public exploit known

Description

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8148, CVE-2018-8162.

Affected products

ProductAffected versionsFixed in
Microsoft excel = 2010-sp2 No fix listed
Microsoft excel = 2013-sp1 No fix listed
Microsoft excel = 2016 No fix listed
Microsoft office = 2010-sp2 No fix listed
Microsoft office = 2013-sp1 No fix listed
Microsoft office = 2016 No fix listed
Microsoft office compatibility pack All versions No fix listed
Microsoft office for mac = 2016 No fix listed
Microsoft Office = 2010 Service Pack 2 (32-bit editions) No fix listed
Microsoft Office = 2010 Service Pack 2 (64-bit editions) No fix listed
Microsoft Office = 2013 RT Service Pack 1 No fix listed
Microsoft Office = 2013 Service Pack 1 (32-bit editions) No fix listed
Microsoft Office = 2013 Service Pack 1 (64-bit editions) No fix listed
Microsoft Office = 2016 Click-to-Run (C2R) for 32-bit editions No fix listed
Microsoft Office = 2016 Click-to-Run (C2R) for 64-bit editions No fix listed
Microsoft Office = 2016 for Mac No fix listed
Microsoft Office = Compatibility Pack Service Pack 3 No fix listed
Microsoft Excel = 2010 Service Pack 2 (32-bit editions) No fix listed
Microsoft Excel = 2010 Service Pack 2 (64-bit editions) No fix listed
Microsoft Excel = 2013 RT Service Pack 1 No fix listed
Microsoft Excel = 2013 Service Pack 1 (32-bit editions) No fix listed
Microsoft Excel = 2013 Service Pack 1 (64-bit editions) No fix listed
Microsoft Excel = 2016 (32-bit edition) No fix listed
Microsoft Excel = 2016 (64-bit edition) No fix listed

References