CVE-2018-8432
First published: Wed Oct 10 2018(Updated: )
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Windows Server 2019, Windows Server 2008 R2, Windows 10, Windows Server 2008.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Excel Viewer | =2007-sp3 | |
| Microsoft Office | =2016 | |
| Microsoft Office | =2019 | |
| Microsoft Office 365 Proplus | ||
| Microsoft Office Compatibility Pack | =sp3 | |
| Microsoft PowerPoint Viewer | =2007 | |
| Microsoft Word Viewer | ||
| Microsoft Windows 10 | =1809 | |
| Microsoft Windows 7 | =sp1 | |
| Microsoft Windows Server 2008 | =sp2 | |
| Microsoft Windows Server 2008 | =r2-sp1 | |
| Microsoft Windows Server 2019 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-8432?
CVE-2018-8432 is a remote code execution vulnerability in Microsoft Graphics Components.
Which software is affected by CVE-2018-8432?
Windows 7, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft Excel Viewer, Microsoft Office Compatibility Pack, Microsoft PowerPoint Viewer, and Microsoft Word Viewer are affected by CVE-2018-8432.
What is the severity of CVE-2018-8432?
CVE-2018-8432 has a severity rating of 7.8, which is considered critical.
How does CVE-2018-8432 impact Windows 10?
Windows 10 is impacted by CVE-2018-8432 if it is running version 1809.
How do I protect myself from CVE-2018-8432?
To protect yourself from CVE-2018-8432, make sure you install the necessary security updates provided by Microsoft.
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/remedy
- agent/author
- agent/references
- agent/severity
- agent/tags
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft excel viewer
- version/microsoft excel viewer/2007-sp3
- canonical/microsoft office
- version/microsoft office/2016
- version/microsoft office/2019
- canonical/microsoft office 365 proplus
- canonical/microsoft office compatibility pack
- version/microsoft office compatibility pack/sp3
- canonical/microsoft powerpoint viewer
- version/microsoft powerpoint viewer/2007
- canonical/microsoft word viewer
- canonical/microsoft windows 10
- version/microsoft windows 10/1809
- canonical/microsoft windows 7
- version/microsoft windows 7/sp1
- canonical/microsoft windows server 2008
- version/microsoft windows server 2008/sp2
- version/microsoft windows server 2008/r2-sp1
- canonical/microsoft windows server 2019