1. CVE-Search
  2. CVE-2018-8577
ID CVE-2018-8577
Summary A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This CVE ID is unique from CVE-2018-8574.
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*
    cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*
  • cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*
    cpe:2.3:a:microsoft:excel_viewer:2007:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
    cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*
  • cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*
    cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*
  • cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office:2019:*:*:*:mac_os_x:*:*:*
    cpe:2.3:a:microsoft:office:2019:*:*:*:mac_os_x:*:*:*
  • cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*
    cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*
CVSS
Base: 9.3 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:C/I:C/A:C
refmap via4
bid 105834
confirm https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8577
sectrack 1042134
Last major update 24-08-2020 - 17:37
Published 14-11-2018 - 01:29
Last modified 24-08-2020 - 17:37
Back to Top