CVEvulnerability
CVE-2018-8501
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-10-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Office 365 ProPlus, PowerPoint Viewer, Microsoft Office, Microsoft PowerPoint.
Affected configurations
• microsoft office 2010
• microsoft office 2013
• microsoft office 2016
• microsoft office 2019
• microsoft office 365 proplus
• microsoft powerpoint 2010
• microsoft powerpoint 2013
• microsoft powerpoint 2016
• microsoft powerpoint viewer 2012
References
- http://www.securityfocus.com/bid/105497 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041838 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8501 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/105497 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041838 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8501 Patch, Vendor Advisory