CVE Vulnerabilities

CVE-2018-8524

Published: Nov 14, 2018 | Modified: Aug 24, 2020
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka Microsoft Outlook Remote Code Execution Vulnerability. This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8576, CVE-2018-8582.

Affected Software

Name Vendor Start Version End Version
Office Microsoft 2019 (including) 2019 (including)
Office_365_proplus Microsoft - (including) - (including)
Outlook Microsoft 2010-sp2 (including) 2010-sp2 (including)
Outlook Microsoft 2013-sp1 (including) 2013-sp1 (including)
Outlook Microsoft 2016 (including) 2016 (including)
Outlook_rt Microsoft 2013-sp1 (including) 2013-sp1 (including)

References