CVE-2018-8312

HIGH

Microsoft Access - Remote Code Execution

Title source: llm
STIX 2.1

Description

A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote Code Execution Vulnerability." This affects Microsoft Access, Microsoft Office.

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/104645
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1041254

Scores

CVSS v3 7.8
EPSS 0.1955
EPSS Percentile 97.1%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

Status published
Products (3)
microsoft/access 2013 sp1
microsoft/access 2016
microsoft/office 2016
Published Jul 11, 2018
Tracked Since Feb 18, 2026