CVE Vulnerabilities

CVE-2018-8501

Published: Oct 10, 2018 | Modified: Oct 03, 2019
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka Microsoft PowerPoint Remote Code Execution Vulnerability. This affects Office 365 ProPlus, PowerPoint Viewer, Microsoft Office, Microsoft PowerPoint.

Affected Software

Name Vendor Start Version End Version
Office Microsoft 2010-sp2 (including) 2010-sp2 (including)
Office Microsoft 2013-sp1 (including) 2013-sp1 (including)
Office Microsoft 2016 (including) 2016 (including)
Office Microsoft 2019 (including) 2019 (including)
Office_365_proplus Microsoft - (including) - (including)
Powerpoint Microsoft 2010-sp2 (including) 2010-sp2 (including)
Powerpoint Microsoft 2013-sp1 (including) 2013-sp1 (including)
Powerpoint Microsoft 2016 (including) 2016 (including)
Powerpoint_viewer Microsoft 2012 (including) 2012 (including)

References