CVE Vulnerabilities

CVE-2018-8575

Published: Nov 14, 2018 | Modified: Aug 24, 2020
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka Microsoft Project Remote Code Execution Vulnerability. This affects Microsoft Project, Office 365 ProPlus, Microsoft Project Server.

Affected Software

Name Vendor Start Version End Version
Office_365_proplus Microsoft - (including) - (including)
Project Microsoft 2010-sp2 (including) 2010-sp2 (including)
Project Microsoft 2013-sp1 (including) 2013-sp1 (including)
Project Microsoft 2016 (including) 2016 (including)

References