CVE Vulnerabilities

CVE-2018-8310

Published: Jul 11, 2018 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails, aka Microsoft Office Tampering Vulnerability. This affects Microsoft Word, Microsoft Office.

Affected Software

NameVendorStart VersionEnd Version
OfficeMicrosoft2010-sp2 (including)2010-sp2 (including)
OfficeMicrosoft2016 (including)2016 (including)

References