CVE-2018-8582: Critical severity microsoft office 365 vulnerability

Published Nov 14, 2018

Updated

A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8524, CVE-2018-8576.

Affected Software

6 affected components

Microsoft Office 365 ProPlus

Microsoft Outlook=2010-sp2

Microsoft Outlook=2013-sp1

Microsoft Outlook=2016

Microsoft Outlook Rt=2013-sp1

Microsoft Windows Server 2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8582

Event History

Nov 14, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-8582?

CVE-2018-8582 is a remote code execution vulnerability in Microsoft Outlook.

Which software products are affected by CVE-2018-8582?

Office 365 ProPlus, Microsoft Office, and Microsoft Outlook versions 2010 SP2, 2013 SP1, 2016, and Outlook RT 2013 SP1 are affected.

What is the severity rating of CVE-2018-8582?

CVE-2018-8582 has a severity rating of 8.8 (Critical).

How does CVE-2018-8582 work?

CVE-2018-8582 exploits a vulnerability in the way Microsoft Outlook parses specially modified rule export files, allowing remote code execution.

How can I fix CVE-2018-8582?

Update affected software to the latest available version from Microsoft to mitigate CVE-2018-8582.