Unscored

CVE-2018-8281

Microsoft Microsoft Excel Viewer; Microsoft Microsoft PowerPoint Viewer; Microsoft Microsoft Office; Microsoft Microsoft Office Word Viewer Published: 2018-07-11 03:00 (8 years ago)

Description

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Microsoft Office, Microsoft Office Word Viewer.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
Microsoft	Microsoft Excel Viewer	Microsoft Excel Viewer
Microsoft	Microsoft Office	2016 Click-to-Run (C2R) for 32-bit editions, 2016 Click-to-Run (C2R) for 64-bit editions, 2016 for Mac, Compatibility Pack Service Pack 3
Microsoft	Microsoft Office Word Viewer	Microsoft Office Word Viewer
Microsoft	Microsoft PowerPoint Viewer	Microsoft PowerPoint Viewer

References and patches

1041252 vdb-entry
104609 vdb-entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8281

CVSS score

Not scored yet. It appears here once the CNA, CISA or NVD scores it.

EPSS (chance of exploitation in 30 days)

21.34%

higher than 98% of all CVEs

Timeline

ID reserved2018-03-14
Published2018-07-11 03:00
Reached IP-DB2026-10-25 00:05
Last updated2024-08-05 09:54

Assigned by (CNA): microsoft

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Recent CVEs in the same product — Microsoft Office / 365 Apps

8.8High

CVE-2026-120003 20 hours ago

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

8.8High

CVE-2026-120001 20 hours ago

Microsoft Office PowerPoint Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

6.5Medium

CVE-2026-119999 20 hours ago

Microsoft Office Excel Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

7.8High

CVE-2026-119997 20 hours ago

Microsoft Office Outlook Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

6.5Medium

CVE-2026-119998 20 hours ago

Microsoft Office Security Feature Bypass Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Product ui does not warn user of unsafe actions in Microsoft Office allows an unauthorized attacker to bypass a security feature over a network.

7.5High

CVE-2026-119995 20 hours ago

Microsoft Office Outlook Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.