CVE-2018-8628 : A remote code execution vulnerability exists in Microsoft PowerPoint software wh

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, Microsoft PowerPoint Viewer, Office Online Server, Microsoft SharePoint Server.

Published 2018-12-12 00:29:01

Updated 2020-08-24 17:37:01

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2018-8628

Microsoft » Office » Version: 2016 For Mac Os X
cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*
Matching versions
Microsoft » Office » Version: 2019
cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
Matching versions
Microsoft » Office » Version: 2019 For Macos
cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*
Matching versions
Microsoft » Powerpoint » Version: 2010 Update SP2
cpe:2.3:a:microsoft:powerpoint:2010:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Powerpoint » Version: 2013 Update SP1 RT Edition
cpe:2.3:a:microsoft:powerpoint:2013:sp1:*:*:rt:*:*:*
Matching versions
Microsoft » Powerpoint » Version: 2016
cpe:2.3:a:microsoft:powerpoint:2016:*:*:*:*:*:*:*
Matching versions
Microsoft » Sharepoint Server » Version: 2013 Update SP1
cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Sharepoint Server » Version: 2019
cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
Matching versions
Microsoft » Office Compatibility Pack » Version: N/A Update SP3
cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
Matching versions
Microsoft » Office Web Apps » Version: 2010 Update SP2
cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Office Web Apps » Version: 2013 Update SP1
cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Powerpoint Viewer
cpe:2.3:a:microsoft:powerpoint_viewer:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Office Online Server
cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*
Matching versions
Microsoft » Sharepoint Enterprise Server » Version: 2016
cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
Matching versions
Microsoft » Office 365 Proplus » Version: N/A
cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2018-8628

EPSS FAQ

7.37%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 94 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2018-8628

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
7.8	HIGH	CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	1.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: None User Interaction: Required Scope: Unchanged Confidentiality: High Integrity: High Availability: High

References for CVE-2018-8628

http://www.securityfocus.com/bid/106104

Microsoft PowerPoint CVE-2018-8628 Remote Code Execution Vulnerability
Third Party Advisory;VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8628

CVE-2018-8628 | Microsoft PowerPoint Remote Code Execution Vulnerability
Patch;Vendor Advisory

Jump to

Vulnerability Details : CVE-2018-8628

Products affected by CVE-2018-8628

Exploit prediction scoring system (EPSS) score for CVE-2018-8628

CVSS scores for CVE-2018-8628

References for CVE-2018-8628