CVE-2018-8248: High severity Microsoft Office vulnerability

Published Jun 14, 2018

Updated

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office.

Affected Software

5 affected components

Microsoft Office=2010-sp2

Microsoft Office=2013-sp1

Microsoft Office=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8248

Event History

Jun 14, 2018

CVE Published

via MITRE·12:00 PM

Data Sourced

via MITRE·12:00 PM

DescriptionWeakness

Data Sourced

via NVD·12:29 PM

RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2018-8248?

CVE-2018-8248 has been rated as critical due to its potential for remote code execution.

How do I fix CVE-2018-8248?

To fix CVE-2018-8248, you should apply the latest security updates and patches provided by Microsoft for your version of Office.

Which versions of Microsoft Office are affected by CVE-2018-8248?

CVE-2018-8248 affects Microsoft Office 2010 SP2, Office 2013 SP1, and Office 2016.

What type of vulnerability is CVE-2018-8248?

CVE-2018-8248 is a remote code execution vulnerability that allows attackers to execute arbitrary code on a victim's machine.

What can attackers do with CVE-2018-8248?

Attackers exploiting CVE-2018-8248 can gain the same user rights as the logged-in user, potentially leading to data theft or further system compromise.