CVE-2018-8502
First published: Wed Oct 10 2018(Updated: )
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in Protected View, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Office Excel | =2010-sp2 | |
| Microsoft Office Excel | =2013-sp1 | |
| Microsoft Office Excel | =2013-sp1 | |
| Microsoft Office Excel | =2016 | |
| Microsoft Office | =2010-sp2 | |
| Microsoft Office | =2013-sp1 | |
| Microsoft Office | =2013-sp1 | |
| Microsoft Office | =2016 | |
| Microsoft Office | =2019 | |
| Microsoft Office 365 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-8502?
CVE-2018-8502 is rated as critical as it can allow remote code execution.
How do I fix CVE-2018-8502?
To fix CVE-2018-8502, ensure that you install the latest security updates provided by Microsoft for affected versions.
Which software is affected by CVE-2018-8502?
CVE-2018-8502 affects Microsoft Excel from versions 2010 through 2019, including Office 365 ProPlus.
What type of vulnerability is CVE-2018-8502?
CVE-2018-8502 is a remote code execution vulnerability caused by improper handling of objects in Protected View.
Can CVE-2018-8502 be exploited through email attachments?
Yes, CVE-2018-8502 can be exploited by opening a malicious Excel file received via email.
- agent/type
- agent/references
- agent/severity
- agent/author
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/microsoft
- canonical/microsoft office excel
- version/microsoft office excel/2010-sp2
- version/microsoft office excel/2013-sp1
- version/microsoft office excel/2016
- canonical/microsoft office
- version/microsoft office/2010-sp2
- version/microsoft office/2013-sp1
- version/microsoft office/2016
- version/microsoft office/2019
- canonical/microsoft office 365