CVE-2018-0852: Critical severity Microsoft Office vulnerability
Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Outlook handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0851.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-0852?
CVE-2018-0852 is a remote code execution vulnerability in Microsoft Outlook and Microsoft Office.
Which versions of Microsoft Outlook and Microsoft Office are affected by CVE-2018-0852?
Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run are affected by CVE-2018-0852.
What is the severity rating of CVE-2018-0852?
CVE-2018-0852 has a severity rating of 8.8 (Critical).
How can this vulnerability be exploited?
This vulnerability can be exploited by remote attackers to execute arbitrary code on the affected system.
Are there any known solutions or patches for CVE-2018-0852?
Yes, Microsoft has released security updates to address CVE-2018-0852. Users should install the latest updates to protect their systems.