Vulnerability · NVD

CVE-2018-8522

CVE-2018-8522, high severity (CVSS 7.8): 3 tracked apps concerned, all fixed or indeterminable on their current version.

Severity (CVSS): 7.8
Exploitation: 19.1 %
Tracked apps: 3
Still exposed: 0

Published on 2018-11-14

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8524, CVE-2018-8576, CVE-2018-8582.

Attack vector : Local No privileges required

Show raw CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS 19.06% moderate exploit risk percentile 97.1%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Microsoft Office macOS brew:cask:microsoft-office

Affected - Fixed in - Latest tracked 16.112.26082125 undetermined
Microsoft Outlook macOS com.microsoft.Outlook

Affected - Fixed in - Latest tracked 16.112.26081720 undetermined
Microsoft Office Windows winget:Microsoft.Office

Affected - Fixed in - Latest tracked - undetermined

Vulnerable CPE configurations (8)

Vendor	Product	Platform	Versions	CPE 2.3 URI
microsoft	office All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:office:2019:::::::*
microsoft	office All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:office:2019:::::::*
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2010:sp2::::::
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2010:sp2::::::
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2013:sp1::::::
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2013:sp1::::::
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2016:::::::*
microsoft	outlook All platforms (wildcard)	All platforms (wildcard)	-	cpe:2.3:a:microsoft:outlook:2016:::::::*

View on NVD ↗ Advisory · portal.msrc.microsoft.com