CVE-2018-8161

Published: May 9, 2018Modified: Nov 21, 2024

7.8

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Word, Word, Microsoft Office, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8157, CVE-2018-8158.

Affected (13)

Products: Microsoft: Office, Office Web Apps, Sharepoint Server, Word

4 products

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Microsoft Office	Version 2010 sp2
Microsoft Office	Version 2013 sp1
Microsoft Office	Version 2016
Microsoft Office	Version 2016
Microsoft Office Web Apps	Version 2010 sp2
Microsoft Office Web Apps	Version 2013 sp1
Microsoft Sharepoint Server	Version 2010 sp2
Microsoft Sharepoint Server	Version 2013 sp1
Microsoft Sharepoint Server	Version 2016
Microsoft Word	Version 2010 sp2
Microsoft Word	Version 2013 sp1
Microsoft Word	Version 2013 sp1
Microsoft Word	Version 2016