High severity8.8NVD Advisory· Published May 23, 2018· Updated Jun 17, 2026

CVE-2018-8176

Description

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office.

Affected products

Microsoft/Office For Mac
cpe:2.3:a:microsoft:office_for_mac:2016:*:*:*:*:*:*:*
Microsoft/Powerpointllm-fuzzy
Microsoft/Office Visiocpe-rescue
Range: 2016 for Mac

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8176nvdPatchVendor Advisory
www.securityfocus.com/bid/104184nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040937nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.019
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000