CVEvulnerability
CVE-2018-8176
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-05-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office.
Affected configurations
• microsoft office for mac 2016
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securityfocus.com/bid/104184 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040937 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8176 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/104184 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040937 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8176 Patch, Vendor Advisory