CVE Vulnerabilities

CVE-2018-0850

Published: Feb 15, 2018 | Modified: Oct 03, 2019
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS 2.x
4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run allow an elevation of privilege vulnerability due to how the format of incoming message is validated, aka Microsoft Outlook Elevation of Privilege Vulnerability.

Affected Software

Name Vendor Start Version End Version
Office Microsoft 2016 2016
Outlook Microsoft 2007 2007
Outlook Microsoft 2010 2010
Outlook Microsoft 2013 2013
Outlook Microsoft 2016 2016

References