CVE-2018-0819: Medium severity microsoft office for mac os x vulnerability

Published Jan 10, 2018

Updated

Microsoft Office 2016 for Mac allows an attacker to send a specially crafted email attachment to a user in an attempt to launch a social engineering attack, such as phishing, due to how Outlook for Mac displays encoded email addresses, aka "Spoofing Vulnerability in Microsoft Office for Mac."

Affected Software

1 affected component

Microsoft Office Mac Os X=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0819

Event History

Jan 10, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0819?

CVE-2018-0819 is considered a medium severity vulnerability.

How do I fix CVE-2018-0819?

To mitigate CVE-2018-0819, ensure that you apply the latest security updates and patches provided by Microsoft for Office 2016 on Mac.

What type of attack is associated with CVE-2018-0819?

CVE-2018-0819 is associated with social engineering attacks, including phishing attempts.

Which version of Microsoft Office is affected by CVE-2018-0819?

CVE-2018-0819 affects Microsoft Office 2016 for Mac.

What is the primary issue caused by CVE-2018-0819?

The primary issue caused by CVE-2018-0819 is the improper display of encoded email addresses in Outlook for Mac, leading to possible spoofing.