CVE-2018-8501

Published: Oct 10, 2018Modified: Nov 21, 2024

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Office 365 ProPlus, PowerPoint Viewer, Microsoft Office, Microsoft PowerPoint.

Affected (11)

Products: Microsoft: Office, Office 365 Proplus, Powerpoint, Powerpoint Viewer

4 products

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Microsoft Office	Version 2010 sp2
Microsoft Office	Version 2013 sp1
Microsoft Office	Version 2013 sp1
Microsoft Office	Version 2016
Microsoft Office	Version 2019
Microsoft Office 365 Proplus	All versions
Microsoft Powerpoint	Version 2010 sp2
Microsoft Powerpoint	Version 2013 sp1
Microsoft Powerpoint	Version 2013 sp1
Microsoft Powerpoint	Version 2016
Microsoft Powerpoint Viewer	Version 2012