CVE-2018-8281 A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This...
HighCVSS 7.8
EPSS 21.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Microsoft Office, Microsoft Office Word Viewer.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2016 | No fix listed |
| Microsoft office compatibility pack | All versions | No fix listed |
| Microsoft office powerpoint viewer | All versions | No fix listed |
| Microsoft office word viewer | All versions | No fix listed |
| Microsoft Excel Viewer | = Microsoft Excel Viewer | No fix listed |
| Microsoft PowerPoint Viewer | = Microsoft PowerPoint Viewer | No fix listed |
| Microsoft Office | = 2016 Click-to-Run (C2R) for 32-bit editions | No fix listed |
| Microsoft Office | = 2016 Click-to-Run (C2R) for 64-bit editions | No fix listed |
| Microsoft Office | = 2016 for Mac | No fix listed |
| Microsoft Office | = Compatibility Pack Service Pack 3 | No fix listed |
| Microsoft Office Word Viewer | = Microsoft Office Word Viewer | No fix listed |
References
- 104609 third-party-advisory vdb-entry
- 1041252 third-party-advisory vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory