Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2018-8432

A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Windows Server 2019, Windows Server 2008 R2, Windows 10, Windows Server 2008.

Published

2018-10-10T13:29:02.337

Last Modified

2024-11-21T04:13:48.910

Status

Modified

Source

[email protected]

Severity

CVSSv3.0: 7.8 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application microsoft excel_viewer 2007 Yes
Application microsoft office 2016 Yes
Application microsoft office 2019 Yes
Application microsoft office_365_proplus - Yes
Application microsoft office_compatibility_pack - Yes
Application microsoft powerpoint_viewer 2007 Yes
Application microsoft word_viewer - Yes
Operating System microsoft windows_10 1809 Yes
Operating System microsoft windows_7 - Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_server_2008 r2 Yes
Operating System microsoft windows_server_2019 - Yes
References