CVE-2018-8576: Critical severity microsoft office vulnerability

Published Nov 14, 2018

Updated

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8524, CVE-2018-8582.

Affected Software

6 affected components

Microsoft Office=2019

Microsoft Office 365 ProPlus

Microsoft Outlook=2010-sp2

Microsoft Outlook=2013-sp1

Microsoft Outlook=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8576

Event History

Nov 14, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-8576?

CVE-2018-8576 is a remote code execution vulnerability in Microsoft Outlook software.

Which software is affected by CVE-2018-8576?

CVE-2018-8576 affects Office 365 ProPlus, Microsoft Office, and Microsoft Outlook.

What is the severity of CVE-2018-8576?

CVE-2018-8576 has a severity value of 7.8, which is considered critical.

How can I fix CVE-2018-8576?

To fix CVE-2018-8576, Microsoft has released a security update. It is recommended to update your Microsoft Outlook software to the latest version.

Where can I find more information about CVE-2018-8576?

You can find more information about CVE-2018-8576 on the following websites: [securityfocus.com](http://www.securityfocus.com/bid/105822), [securitytracker.com](http://www.securitytracker.com/id/1042110), and [Microsoft Security Guidance Advisory](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8576).