CVE-2018-8522: Critical severity microsoft office vulnerability

Published Nov 14, 2018

Updated

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8524, CVE-2018-8576, CVE-2018-8582.

Affected Software

6 affected components

Microsoft Office=2019

Microsoft Office 365 ProPlus

Microsoft Outlook=2010-sp2

Microsoft Outlook=2013-sp1

Microsoft Outlook=2016

Microsoft Outlook Rt=2013-sp1

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8522

Event History

Nov 14, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-8522?

CVE-2018-8522 is a remote code execution vulnerability in Microsoft Outlook software.

What is the severity of CVE-2018-8522?

CVE-2018-8522 has a severity rating of 7.8, which is considered critical.

Which software is affected by CVE-2018-8522?

CVE-2018-8522 affects Office 365 ProPlus, Microsoft Office, and various versions of Microsoft Outlook.

How does CVE-2018-8522 impact Microsoft Outlook?

CVE-2018-8522 allows remote attackers to execute arbitrary code in Microsoft Outlook.

How can I fix CVE-2018-8522?

Apply the latest security updates provided by Microsoft to fix CVE-2018-8522.