CVE-2018-8430: Critical severity microsoft office vulnerability

Published Sep 13, 2018

Updated

A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code Execution Vulnerability." This affects Microsoft Word, Microsoft Office.

Affected Software

4 affected components

Microsoft Office=2013-sp1

Microsoft Office=2016

Microsoft Word=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8430

Event History

Sep 13, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-8430?

CVE-2018-8430 is a remote code execution vulnerability in Microsoft Word that occurs when a user opens a specially crafted PDF file.

How does CVE-2018-8430 affect Microsoft Word?

CVE-2018-8430 affects Microsoft Word by allowing remote code execution if a user opens a malicious PDF file.

What is the severity of CVE-2018-8430?

CVE-2018-8430 has a severity rating of 7.8 out of 10, which is considered critical.

Which versions of Microsoft Office and Microsoft Word are affected by CVE-2018-8430?

Microsoft Office 2013 SP1, Microsoft Office 2016 (Click-to-Run edition), and Microsoft Word 2016 are affected by CVE-2018-8430.

How can I mitigate the risk of CVE-2018-8430?

To mitigate the risk of CVE-2018-8430, it is recommended to apply the necessary security updates provided by Microsoft.