CVE-2018-8502: Critical severity microsoft office excel vulnerability

Published Oct 10, 2018

Updated

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel.

Affected Software

10 affected components

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Office=2010-sp2

Microsoft Office=2013-sp1

Microsoft Office=2016

Microsoft Office=2019

Microsoft Office 365 ProPlus

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8502

Event History

Oct 10, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-8502?

CVE-2018-8502 is rated as critical as it can allow remote code execution.

How do I fix CVE-2018-8502?

To fix CVE-2018-8502, ensure that you install the latest security updates provided by Microsoft for affected versions.

Which software is affected by CVE-2018-8502?

CVE-2018-8502 affects Microsoft Excel from versions 2010 through 2019, including Office 365 ProPlus.

What type of vulnerability is CVE-2018-8502?

CVE-2018-8502 is a remote code execution vulnerability caused by improper handling of objects in Protected View.

Can CVE-2018-8502 be exploited through email attachments?

Yes, CVE-2018-8502 can be exploited by opening a malicious Excel file received via email.