CVE-2018-8597: Critical severity microsoft office excel vulnerability

Published Dec 12, 2018

Updated

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8636.

Affected Software

10 affected components

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Office=2010-sp2

Microsoft Office Mac Os X=2016

Microsoft Office=2019

Microsoft Office Macos=2019

Microsoft Office 365

Microsoft Office Compatibility Pack=sp3

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8597

Event History

Dec 12, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-8597?

CVE-2018-8597 is a remote code execution vulnerability in Microsoft Excel software.

How does CVE-2018-8597 affect Microsoft Excel?

CVE-2018-8597 affects Microsoft Excel by allowing remote code execution.

Which versions of Microsoft Excel are affected by CVE-2018-8597?

Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, and Microsoft Office Compatibility Pack SP3 are affected by CVE-2018-8597.

What is the severity rating of CVE-2018-8597?

CVE-2018-8597 has a severity rating of 7.8 (Critical).

How can I fix the CVE-2018-8597 vulnerability?

To fix the CVE-2018-8597 vulnerability, apply the latest security updates and patches from Microsoft.