CVE-2018-8582
HIGHMicrosoft Outlook - Remote Code Execution via Rule Export File Parsing
Title source: llmDescription
A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8524, CVE-2018-8576.
References (3)
Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1042110
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/105825
Patch, Vendor Advisory x_refsource_confirm
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8582
Scores
CVSS v3
8.8
EPSS
0.1859
EPSS Percentile
97.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
Status
published
Products (6)
microsoft/office_365_proplus
microsoft/outlook
2010 sp2
microsoft/outlook
2013 sp1
microsoft/outlook
2016
microsoft/outlook_rt
2013 sp1
microsoft/windows_server_2019
Published
Nov 14, 2018
Tracked Since
Feb 18, 2026