CVE-2018-8587: Critical severity microsoft office vulnerability

Published Dec 12, 2018

Updated

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook.

Affected Software

6 affected components

Microsoft Office=2010-sp2

Microsoft Office=2013-sp1

Microsoft Office=2016

Microsoft Office=2019

Microsoft Office 365 ProPlus

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8587

Event History

Dec 12, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-8587?

CVE-2018-8587 has been assigned a critical severity rating due to its potential for remote code execution.

How do I fix CVE-2018-8587?

To fix CVE-2018-8587, you should apply the latest security updates provided by Microsoft for the affected Office versions.

Which versions of Microsoft Office are affected by CVE-2018-8587?

CVE-2018-8587 affects Microsoft Office versions 2010 SP2, 2013 SP1, 2016, 2019, and Office 365 ProPlus.

What types of attacks can exploit CVE-2018-8587?

CVE-2018-8587 can be exploited through specially crafted emails that, when opened, allow attackers to execute arbitrary code.

Is CVE-2018-8587 a known vulnerability?

Yes, CVE-2018-8587 is a publicly disclosed vulnerability that has been recognized and documented by cybersecurity authorities.