CVEvulnerability
CVE-2018-8524
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-11-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8576, CVE-2018-8582.
Affected configurations
• microsoft office 2019
• microsoft office 365 proplus
• microsoft outlook 2010
• microsoft outlook 2013
• microsoft outlook 2016
• microsoft outlook rt 2013
References
- http://www.securityfocus.com/bid/105823 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1042110 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8524 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/105823 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1042110 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8524 Patch, Vendor Advisory