CVE-2018-8432: Critical severity microsoft office excel viewer vulnerability

Published Oct 10, 2018

Updated

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Windows Server 2019, Windows Server 2008 R2, Windows 10, Windows Server 2008.

Affected Software

12 affected components

Microsoft Excel Viewer=2007-sp3

Microsoft Office=2016

Microsoft Office=2019

Microsoft Office 365 ProPlus

Microsoft Office Compatibility Pack=sp3

Microsoft PowerPoint Viewer=2007

Microsoft Word Viewer

Microsoft Windows 10=1809

Microsoft Windows 7=sp1

Microsoft Windows Server 2008=sp2

Microsoft Windows Server 2008=r2-sp1

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8432

Event History

Oct 10, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-8432?

CVE-2018-8432 is a remote code execution vulnerability in Microsoft Graphics Components.

Which software is affected by CVE-2018-8432?

Windows 7, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft Excel Viewer, Microsoft Office Compatibility Pack, Microsoft PowerPoint Viewer, and Microsoft Word Viewer are affected by CVE-2018-8432.

What is the severity of CVE-2018-8432?

CVE-2018-8432 has a severity rating of 7.8, which is considered critical.

How does CVE-2018-8432 impact Windows 10?

Windows 10 is impacted by CVE-2018-8432 if it is running version 1809.

How do I protect myself from CVE-2018-8432?

To protect yourself from CVE-2018-8432, make sure you install the necessary security updates provided by Microsoft.