CVE-2018-8575: Critical severity microsoft office 365 vulnerability

Published Nov 14, 2018

Updated

A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka "Microsoft Project Remote Code Execution Vulnerability." This affects Microsoft Project, Office 365 ProPlus, Microsoft Project Server.

Affected Software

4 affected components

Microsoft Office 365 ProPlus

Microsoft Project=2010-sp2

Microsoft Project=2013-sp1

Microsoft Project=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8575

Event History

Nov 14, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-8575?

CVE-2018-8575 is a remote code execution vulnerability that exists in Microsoft Project software when it fails to properly handle objects in memory.

Which software is affected by CVE-2018-8575?

CVE-2018-8575 affects Microsoft Project, Office 365 ProPlus, and Microsoft Project Server.

What is the severity of CVE-2018-8575?

The severity of CVE-2018-8575 is rated as critical with a CVSS score of 7.8.

How can I fix CVE-2018-8575?

To fix CVE-2018-8575, it is recommended to apply the latest security updates provided by Microsoft.

Where can I find more information about CVE-2018-8575?

You can find more information about CVE-2018-8575 on the following websites: - [SecurityFocus](http://www.securityfocus.com/bid/105807) - [SecurityTracker](http://www.securitytracker.com/id/1042116) - [Microsoft Security Guidance Advisory for CVE-2018-8575](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8575)