CVE-2018-8504: Critical severity microsoft office vulnerability

Published Oct 10, 2018

Updated

A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft SharePoint Server, Office 365 ProPlus, Microsoft Office, Microsoft Word.

Affected Software

12 affected components

Microsoft Office=2010-sp2

Microsoft Office=2013-sp1

Microsoft Office=2016

Microsoft Office=2019

Microsoft Office 365 ProPlus

Microsoft Office Web Apps=2010-sp2

Microsoft SharePoint Server=2010-sp2

Microsoft Word=2010-sp2

Microsoft Word=2013-sp1

Microsoft Word=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8504

Event History

Oct 10, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-8504?

CVE-2018-8504 is a remote code execution vulnerability in Microsoft Word software when it fails to properly handle objects in Protected View.

What is the severity of CVE-2018-8504?

The severity of CVE-2018-8504 is critical with a CVSS score of 8.8.

Which software is affected by CVE-2018-8504?

Microsoft SharePoint Server, Office 365 ProPlus, Microsoft Office, and Microsoft Word are affected by CVE-2018-8504.

How can I fix CVE-2018-8504?

Apply the latest security updates and patches provided by Microsoft for the affected software.

Where can I find more information about CVE-2018-8504?

You can find more information about CVE-2018-8504 on the following websites: [SecurityFocus](http://www.securityfocus.com/bid/105499), [SecurityTracker](http://www.securitytracker.com/id/1041840), and the [Microsoft Security Guidance Advisory](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8504).