9.3

CVE-2018-8281

EPSS 19.55%
Veröffentlicht 11.07.2018 00:29:01
Zuletzt bearbeitet 21.11.2024 04:13:32
Erkennungen
Login

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Microsoft Office, Microsoft Office Word Viewer.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 6

NVD 5 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Office Version 2016 SwPlatform mac_os

Microsoft ≫ Office Version 2016 SwEdition click-to-run

Microsoft ≫ Office Compatibility Pack Version - Update sp3

Microsoft ≫ Office Powerpoint Viewer Version -

Microsoft ≫ Office Word Viewer Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	19.55%	0.97

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.8	1.8	5.9	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.securityfocus.com/bid/104609

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1041252

Third Party Advisory

VDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8281

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-8281

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-8281

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-8281

EUVD