CVE-2018-8524 A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects...
HighCVSS 7.8
EPSS 19.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8576, CVE-2018-8582.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2019 | No fix listed |
| Microsoft office 365 proplus | All versions | No fix listed |
| Microsoft outlook | = 2010-sp2 | No fix listed |
| Microsoft outlook | = 2013-sp1 | No fix listed |
| Microsoft outlook | = 2016 | No fix listed |
| Microsoft outlook rt | = 2013-sp1 | No fix listed |
| Microsoft Office | = 2019 for 32-bit editions | No fix listed |
| Microsoft Office | = 2019 for 64-bit editions | No fix listed |
| Microsoft office | = 365 ProPlus for 32-bit Systems | No fix listed |
| Microsoft office | = 365 ProPlus for 64-bit Systems | No fix listed |
| Microsoft Outlook | = 2010 Service Pack 2 (32-bit editions) | No fix listed |
| Microsoft Outlook | = 2010 Service Pack 2 (64-bit editions) | No fix listed |
| Microsoft Outlook | = 2013 RT Service Pack 1 | No fix listed |
| Microsoft Outlook | = 2013 Service Pack 1 (32-bit editions) | No fix listed |
| Microsoft Outlook | = 2013 Service Pack 1 (64-bit editions) | No fix listed |
| Microsoft Outlook | = 2016 (32-bit edition) | No fix listed |
| Microsoft Outlook | = 2016 (64-bit edition) | No fix listed |
References
- 105823 third-party-advisory vdb-entry
- 1042110 third-party-advisory vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory