CVE-2018-8636: Critical severity microsoft office excel vulnerability

Published Dec 12, 2018

Updated

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8597.

Affected Software

6 affected components

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Excel=2019

Microsoft Office 365 ProPlus

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8636

Event History

Dec 12, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-8636?

CVE-2018-8636 is rated as critical due to its potential for remote code execution.

How do I fix CVE-2018-8636?

To mitigate CVE-2018-8636, users should apply the latest security updates provided by Microsoft for affected Excel versions.

Which versions of Excel are affected by CVE-2018-8636?

CVE-2018-8636 affects Microsoft Excel 2010 SP2, 2013 SP1, 2016, 2019, and Office 365 ProPlus.

What types of attacks can CVE-2018-8636 enable?

CVE-2018-8636 can be exploited to allow an attacker to execute arbitrary code on the victim's system.

Is there a workaround for CVE-2018-8636?

The primary recommendation for CVE-2018-8636 is to update to the latest version of Excel, as no effective workaround exists.