← Back

CVE-2018-8628

nvd nist
Published: Dec 12, 2018Modified: Nov 21, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, Microsoft PowerPoint Viewer, Office Online Server, Microsoft SharePoint Server.

Affected (15)

Microsoft
9 products
Office
Office 365 Proplus
Office Compatibility Pack
Office Online Server
Office Web Apps
Powerpoint
Powerpoint Viewer
Sharepoint Enterprise Server
Sharepoint Server
Configuration A
15 vulnerable
Vulnerable SoftwareAffected Versions
Microsoft
Office
Version 2016
Office
Version 2019
Office
Version 2019
Office 365 Proplus
All versions
Office Compatibility Pack
All versions
Office Online Server
All versions
Microsoft
Office Web Apps
Version 2010 sp2
Office Web Apps
Version 2013 sp1
Microsoft
Powerpoint
Version 2010 sp2
Powerpoint
Version 2013 sp1
Powerpoint
Version 2016
Powerpoint Viewer
All versions
Sharepoint Enterprise Server
Version 2016
Microsoft
Sharepoint Server
Version 2013 sp1
Sharepoint Server
Version 2019

References (4)

Source: secure@microsoft.com
Third Party AdvisoryVDB Entry
Source: secure@microsoft.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.