VYPR
← All advisories
High severity7.8NVD Advisory· Published Dec 12, 2018· Updated Jun 17, 2026

CVE-2018-8628

CVE-2018-8628

Description

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, Microsoft PowerPoint Viewer, Office Online Server, Microsoft SharePoint Server.

Affected products

25
  • Microsoft/Office SharePointcpe-rescue
    Range: Enterprise Server 2016
  • Microsoft/Office Online Servercpe-rescue2 versions
    Office Online Server+ 1 more
    • (no CPE)range: Office Online Server
    • cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*
  • Microsoft/Sharepoint Servercpe-rescue5 versions
    2013 Service Pack 1+ 4 more
    • (no CPE)range: 2013 Service Pack 1
    • (no CPE)
    • cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
  • Microsoft/Office Visiocpe-rescue
    Range: 2016 for Mac
  • Microsoft/Powerpointllm-fuzzy4 versions
    (expand)+ 3 more
    • (no CPE)
    • cpe:2.3:a:microsoft:powerpoint:2010:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:powerpoint:2013:sp1:*:*:rt:*:*:*
    • cpe:2.3:a:microsoft:powerpoint:2016:*:*:*:*:*:*:*
  • Microsoft/Officellm-fuzzy5 versions
    (expand)+ 4 more
    • (no CPE)
    • cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*
    • cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*
    • (no CPE)range: 365 ProPlus for 32-bit Systems
  • Microsoft/Office Powerpoint Viewercpe-rescue3 versions
    Microsoft PowerPoint Viewer+ 2 more
    • (no CPE)range: Microsoft PowerPoint Viewer
    • (no CPE)range: 2010 Service Pack 2 (32-bit editions)
    • cpe:2.3:a:microsoft:powerpoint_viewer:*:*:*:*:*:*:*:*
  • Microsoft/Office 365 Proplus
    cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
  • Microsoft/Office Compatibility Pack
    cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
  • Microsoft/Office Web Apps2 versions
    cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.