Description
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Windows Server 2019, Windows Server 2008 R2, Windows 10, Windows Server 2008.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/105458
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1041823
Patch, Vendor Advisory x_refsource_confirm
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8432
Scores
CVSS v3
7.8
EPSS
0.1963
EPSS Percentile
97.1%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
Status
published
Products (12)
microsoft/excel_viewer
2007 sp3
microsoft/office
2016
microsoft/office
2019
microsoft/office_365_proplus
microsoft/office_compatibility_pack
microsoft/powerpoint_viewer
2007
microsoft/windows_10
1809
microsoft/windows_7
microsoft/windows_server_2008
microsoft/windows_server_2008
r2 sp1
... and 2 more
Published
Oct 10, 2018
Tracked Since
Feb 18, 2026