CVE-2018-8176: Input Validation
Published May 23, 2018
·Updated
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office.
Affected Software
1 affected component
Microsoft Office for Mac=2016
Remediation
Event History
May 23, 2018
CVE Published
via MITRE·01:00 PM
Data Sourced
via MITRE·01:00 PM
DescriptionWeakness
Data Sourced
via NVD·01:29 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2018-8176?
CVE-2018-8176 is a remote code execution vulnerability in Microsoft PowerPoint software.
2
How does CVE-2018-8176 affect Microsoft Office?
CVE-2018-8176 affects Microsoft Office by allowing remote code execution.
3
What is the severity of CVE-2018-8176?
CVE-2018-8176 has a severity rating of 8.8 (critical).
4
How can CVE-2018-8176 be exploited?
CVE-2018-8176 can be exploited by sending a specially crafted XML content to a vulnerable Microsoft PowerPoint software.
5
Is there a patch available for CVE-2018-8176?
Yes, Microsoft has released a patch to address the vulnerability. It is recommended to update Microsoft Office to the latest version.