CVE-2018-0852
First published: Tue Feb 13 2018(Updated: )
Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Outlook handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0851.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Office | =2016 | |
| Microsoft Office | =2016 | |
| Microsoft Outlook | =2010-sp2 | |
| Microsoft Outlook | =2013-sp1 | |
| Microsoft Outlook Rt | =2013-sp1 | |
| Microsoft Outlook | =2016 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-0852?
CVE-2018-0852 is a remote code execution vulnerability in Microsoft Outlook and Microsoft Office.
Which versions of Microsoft Outlook and Microsoft Office are affected by CVE-2018-0852?
Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run are affected by CVE-2018-0852.
What is the severity rating of CVE-2018-0852?
CVE-2018-0852 has a severity rating of 8.8 (Critical).
How can this vulnerability be exploited?
This vulnerability can be exploited by remote attackers to execute arbitrary code on the affected system.
Are there any known solutions or patches for CVE-2018-0852?
Yes, Microsoft has released security updates to address CVE-2018-0852. Users should install the latest updates to protect their systems.
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/event
- agent/type
- agent/description
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft office
- version/microsoft office/2016
- canonical/microsoft outlook
- version/microsoft outlook/2010-sp2
- version/microsoft outlook/2013-sp1
- canonical/microsoft outlook rt
- version/microsoft outlook rt/2013-sp1
- version/microsoft outlook/2016