CVE-2018-8432

State: Published
Severity: Not scored
Published: Oct 10, 2018
Updated: Aug 5, 2024
Reserved: Mar 14, 2018

Description

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Windows Server 2019, Windows Server 2008 R2, Windows 10, Windows Server 2008.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Windows 7Microsoft	32-bit Systems Service Pack 1Affected x64-based Systems Service Pack 1Affected
Microsoft OfficeMicrosoft	2016 for MacAffected 2019 for 32-bit editionsAffected 2019 for 64-bit editionsAffected Compatibility Pack Service Pack 3Affected
Microsoft Office Word ViewerMicrosoft	Microsoft Office Word ViewerAffected
Microsoft Excel ViewerMicrosoft	2007 Service Pack 3Affected
Microsoft PowerPoint ViewerMicrosoft	2007Affected
Windows Server 2019Microsoft	(Server Core installation)Affected
OfficeMicrosoft	365 ProPlus for 32-bit SystemsAffected 365 ProPlus for 64-bit SystemsAffected
Windows Server 2008 R2Microsoft	Itanium-Based Systems Service Pack 1Affected x64-based Systems Service Pack 1Affected x64-based Systems Service Pack 1 (Server Core installation)Affected
Windows 10Microsoft	Version 1809 for 32-bit SystemsAffected Version 1809 for x64-based SystemsAffected
Windows Server 2008Microsoft	32-bit Systems Service Pack 2Affected 32-bit Systems Service Pack 2 (Server Core installation)Affected Itanium-Based Systems Service Pack 2Affected x64-based Systems Service Pack 2Affected x64-based Systems Service Pack 2 (Server Core installation)Affected

References

105458vdb-entry
1041823vdb-entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8432

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.