CVE-2018-8158: High severity Microsoft Office vulnerability

Published May 9, 2018

Updated

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Office. This CVE ID is unique from CVE-2018-8157, CVE-2018-8161.

Affected Software

4 affected components

Microsoft Office=2010-sp2

Microsoft Office=2013-sp1

Microsoft Office=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8158

Event History

May 9, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

via NVD·07:29 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2018-8158?

CVE-2018-8158 is classified as a critical remote code execution vulnerability.

How do I fix CVE-2018-8158?

To fix CVE-2018-8158, ensure that you apply the latest security updates provided by Microsoft for affected Office versions.

Which Microsoft Office versions are affected by CVE-2018-8158?

CVE-2018-8158 affects Microsoft Office 2010 SP2, 2013 SP1, and 2016 versions.

What type of vulnerability is CVE-2018-8158?

CVE-2018-8158 is a remote code execution vulnerability caused by improper handling of objects in memory within Microsoft Office.

Can CVE-2018-8158 be exploited remotely?

Yes, CVE-2018-8158 can be exploited remotely, allowing an attacker to execute arbitrary code on the affected system.