CVE-2018-8161

State: Published
Severity: Not scored
Published: May 9, 2018
Updated: Aug 5, 2024
Reserved: Mar 14, 2018

Description

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Word, Word, Microsoft Office, Microsoft SharePoint. This CVE ID is unique from CVE-2018-8157, CVE-2018-8158.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Microsoft WordMicrosoft	2010 Service Pack 2 (32-bit editions)Affected 2010 Service Pack 2 (64-bit editions)Affected 2013 RT Service Pack 1Affected 2013 Service Pack 1 (32-bit editions)Affected 2013 Service Pack 1 (64-bit editions)Affected 2016 (32-bit edition)Affected 2016 (64-bit edition)Affected
WordMicrosoft	Automation Services on Microsoft SharePoint Server 2010 Service Pack 2Affected Automation Services on Microsoft SharePoint Server 2013 Service Pack 1Affected
Microsoft OfficeMicrosoft	2010 Service Pack 2 (32-bit editions)Affected 2010 Service Pack 2 (64-bit editions)Affected Web Apps 2010 Service Pack 2Affected Web Apps Server 2013 Service Pack 1Affected
Microsoft SharePointMicrosoft	Enterprise Server 2016Affected

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8161
104052vdb-entry
1040853vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.