Vigie VulnDBEuropean-hosted Vulnerability DB

CVE-2018-8161

At a glance

Severity
Not available
EPSS
EPSS 21.32 % · percentile 98 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
microsoft
NVD status
Modified

Description

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Word, Word, Microsoft Office, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8157, CVE-2018-8158.

Scores

VersionScoreVectorScored by
CVSS 3.0HIGH 7.8CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HNVD · nvd@nist.gov (Primary)
CVSS 2.0HIGH 9.3AV:N/AC:M/Au:N/C:C/I:C/A:CNVD · nvd@nist.gov (Primary)

European references

CERT-FR advisories

Affected configurations (NVD CPE)

Affected products

ProductVersions
Microsoft · Microsoft Wordaffected 2010 Service Pack 2 (32-bit editions) ; affected 2010 Service Pack 2 (64-bit editions) ; affected 2013 RT Service Pack 1 ; affected 2013 Service Pack 1 (32-bit editions) ; affected 2013 Service Pack 1 (64-bit editions) ; affected 2016 (32-bit edition)
Microsoft · Wordaffected Automation Services on Microsoft SharePoint Server 2010 Service Pack 2 ; affected Automation Services on Microsoft SharePoint Server 2013 Service Pack 1
Microsoft · Microsoft Officeaffected 2010 Service Pack 2 (32-bit editions) ; affected 2010 Service Pack 2 (64-bit editions) ; affected Web Apps 2010 Service Pack 2 ; affected Web Apps Server 2013 Service Pack 1
Microsoft · Microsoft SharePointaffected Enterprise Server 2016

References

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD