CVE-2018-8375: Critical severity microsoft office excel vulnerability

Published Aug 15, 2018

Updated

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8379.

Affected Software

8 affected components

Microsoft Excel=2010-sp2

Microsoft Excel=2013

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Excel Viewer=2007-sp3

Microsoft Office Mac=2016

Microsoft Office Compatibility Pack=sp3

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8375

Event History

Aug 15, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-8375?

CVE-2018-8375 is a remote code execution vulnerability in Microsoft Excel software.

Which software are affected by CVE-2018-8375?

Microsoft Excel Viewer, Microsoft Office, and Microsoft Excel versions 2010, 2013, and 2016 are affected by CVE-2018-8375.

What is the severity of CVE-2018-8375?

CVE-2018-8375 has a severity rating of 7.8 (Critical).

How does CVE-2018-8375 work?

CVE-2018-8375 occurs when the Microsoft Excel software fails to properly handle objects in memory, allowing remote code execution.

How can I fix CVE-2018-8375?

To fix CVE-2018-8375, it is recommended to apply the latest security updates provided by Microsoft.