CVE-2018-8430
At a glance Severity Not available EPSS EPSS 23.04 % · percentile 98 (2026-10-28) State PUBLISHED Published 2018-09-13 Updated 2024-08-05 Assigner microsoft NVD status Modified Description A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code Execution Vulnerability." This affects Microsoft Word, Microsoft Office.
Scores Version Score Vector Scored by CVSS 3.0 HIGH 7.8 CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H NVD · nvd@nist.gov (Primary) CVSS 2.0 HIGH 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C NVD · nvd@nist.gov (Primary)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*cpe:2.3:a:microsoft:office:2016:*:*:*:click-to-run:*:*:*cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*Affected products Product Versions Microsoft · Microsoft Word affected 2013 RT Service Pack 1 ; affected 2013 Service Pack 1 (32-bit editions) ; affected 2013 Service Pack 1 (64-bit editions) ; affected 2016 (32-bit edition) ; affected 2016 (64-bit edition) Microsoft · Microsoft Office affected 2016 Click-to-Run (C2R) for 32-bit editions ; affected 2016 Click-to-Run (C2R) for 64-bit editions
References
Sources
