High severity7.8NVD Advisory· Published Jul 11, 2018· Updated Jun 17, 2026

CVE-2018-8312

Description

A remote code execution vulnerability exists when Microsoft Access fails to properly handle objects in memory, aka "Microsoft Access Remote Code Execution Vulnerability." This affects Microsoft Access, Microsoft Office.

Affected products

Microsoft/Access3 versions
cpe:2.3:a:microsoft:access:2013:sp1:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:access:2013:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:access:2016:*:*:*:*:*:*:*
- (no CPE)
Microsoft/Office2 versions
cpe:2.3:a:microsoft:office:2016:*:*:*:click-to-run:*:*:*+ 1 more
- cpe:2.3:a:microsoft:office:2016:*:*:*:click-to-run:*:*:*
- (no CPE)
Microsoft/Accountcpe-rescue
Range: 2013 Service Pack 1 (32-bit editions)
Microsoft/Office Visiocpe-rescue
Range: 2016 Click-to-Run (C2R) for 32-bit editions

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8312nvdPatchVendor Advisory
www.securityfocus.com/bid/104645nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041254nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.017
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000