CVE-2018-8332
First published: Thu Sep 13 2018(Updated: )
A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Office | =2016 | |
| Microsoft Office For Mac | =2016 | |
| Microsoft Windows 10 | ||
| Microsoft Windows 10 | =1607 | |
| Microsoft Windows 10 | =1703 | |
| Microsoft Windows 10 | =1709 | |
| Microsoft Windows 10 | =1803 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows 8.1 | ||
| Microsoft Windows 8.1 | ||
| Microsoft Windows Server | =2008-r2 | |
| Microsoft Windows Server | =2008-r2 | |
| Microsoft Windows Server | =2008-sp2 | |
| Microsoft Windows Server | =2012 | |
| Microsoft Windows Server | =2012-r2 | |
| Microsoft Windows Server | =2016 | |
| Microsoft Windows Server | =2016-1709 | |
| Microsoft Windows Server | =2016-1803 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-8332?
CVE-2018-8332 is a remote code execution vulnerability that affects Windows 7, Microsoft Office, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, and Windows Server 2016.
How severe is CVE-2018-8332?
CVE-2018-8332 has a severity rating of 8.8, which is considered critical.
Which software versions are affected by CVE-2018-8332?
CVE-2018-8332 affects Windows 7, Microsoft Office 2016, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, and Windows Server 2016.
What is the recommended course of action for CVE-2018-8332?
To mitigate CVE-2018-8332, it is recommended to apply the latest security patches provided by Microsoft.
Where can I find more information about CVE-2018-8332?
More information about CVE-2018-8332 can be found on the Microsoft Security Guidance advisory page.
- collector/nvd-index
- agent/type
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft office
- version/microsoft office/2016
- canonical/microsoft office for mac
- version/microsoft office for mac/2016
- canonical/microsoft windows 10
- version/microsoft windows 10/1607
- version/microsoft windows 10/1703
- version/microsoft windows 10/1709
- version/microsoft windows 10/1803
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows 8.1
- canonical/microsoft windows server
- version/microsoft windows server/2008-r2
- version/microsoft windows server/2008-sp2
- version/microsoft windows server/2012
- version/microsoft windows server/2012-r2
- version/microsoft windows server/2016
- version/microsoft windows server/2016-1709
- version/microsoft windows server/2016-1803