CVEvulnerability
CVE-2018-8582
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-11-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8524, CVE-2018-8576.
Affected configurations
• microsoft office 365 proplus
• microsoft outlook 2010
• microsoft outlook 2013
• microsoft outlook 2016
• microsoft outlook rt 2013
• microsoft windows server 2019
References
- http://www.securityfocus.com/bid/105825 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1042110 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8582 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/105825 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1042110 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8582 Patch, Vendor Advisory