High severity7.8NVD Advisory· Published Jul 11, 2018· Updated Jun 17, 2026

CVE-2018-8281

Description

A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka "Microsoft Office Remote Code Execution Vulnerability." This affects Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Microsoft Office, Microsoft Office Word Viewer.

Affected products

Microsoft/Office Powerpoint Viewerllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: Microsoft PowerPoint Viewer
Microsoft/Officellm-fuzzy
Microsoft/Excel Viewerllm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: Microsoft Excel Viewer
Microsoft/Office Visiocpe-rescue
Range: 2016 Click-to-Run (C2R) for 32-bit editions
Microsoft/Word Viewercpe-rescue
Range: Microsoft Office Word Viewer

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8281nvdPatchVendor Advisory
www.securityfocus.com/bid/104609nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041252nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.016
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000