CVE-2018-8157: High severity Microsoft Office vulnerability

Published May 9, 2018

Updated

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Office. This CVE ID is unique from CVE-2018-8158, CVE-2018-8161.

Affected Software

5 affected components

Microsoft Office=2010-sp2

Microsoft Office=2013-sp1

Microsoft Office=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8157

Event History

May 9, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Data Sourced

via NVD·07:29 PM

RemedyDescriptionSeverityAffected Software

Jul 25, 58461

Event

06:19 AM

Frequently Asked Questions

What is the severity of CVE-2018-8157?

CVE-2018-8157 is rated as critical due to its potential for remote code execution.

How do I fix CVE-2018-8157?

To mitigate CVE-2018-8157, you should apply the latest security updates provided by Microsoft for affected versions of Office.

What versions of Microsoft Office are affected by CVE-2018-8157?

CVE-2018-8157 impacts Microsoft Office 2010 SP2, 2013 SP1, and 2016.

What types of attacks can exploit CVE-2018-8157?

CVE-2018-8157 can be exploited through specially crafted documents that may allow the execution of malicious code.

Is there a workaround for CVE-2018-8157?

While there is no official workaround for CVE-2018-8157, it is strongly recommended to avoid opening untrusted documents.