CVE-2018-8147: High severity Microsoft Excel vulnerability

Published May 9, 2018

Updated

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8148, CVE-2018-8162.

Affected Software

8 affected components

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Office=2010-sp2

Microsoft Office=2013-sp1

Microsoft Office=2016

Microsoft Office Compatibility Pack=sp3

Microsoft Office for Mac=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8147

Event History

May 9, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Data Sourced

via NVD·07:29 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is CVE-2018-8147?

CVE-2018-8147 is a remote code execution vulnerability in Microsoft Excel software.

Which software is affected by CVE-2018-8147?

Microsoft Office and Microsoft Excel are affected by CVE-2018-8147.

What is the severity of CVE-2018-8147?

The severity of CVE-2018-8147 is critical with a CVSS score of 7.8.

How does CVE-2018-8147 exploit work?

CVE-2018-8147 exploits a failure of Microsoft Excel software to properly handle objects in memory, leading to remote code execution.

Is there a fix available for CVE-2018-8147?

Yes, Microsoft has released security updates to address the CVE-2018-8147 vulnerability. Please refer to Microsoft's official advisory for more details.