VYPR
High severity7.8NVD Advisory· Published Dec 12, 2018· Updated Jun 17, 2026

CVE-2018-8628

CVE-2018-8628

Description

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, Microsoft PowerPoint Viewer, Office Online Server, Microsoft SharePoint Server.

Affected products

25
  • Microsoft/Office5 versions
    cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*+ 4 more
    • cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*
    • cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*
    • (no CPE)
    • (no CPE)range: 365 ProPlus for 32-bit Systems
  • cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:office_online_server:*:*:*:*:*:*:*:*
    • (no CPE)range: Office Online Server
  • cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:powerpoint:2010:sp2:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:powerpoint:2010:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:powerpoint:2013:sp1:*:*:rt:*:*:*
    • cpe:2.3:a:microsoft:powerpoint:2016:*:*:*:*:*:*:*
    • (no CPE)
  • cpe:2.3:a:microsoft:powerpoint_viewer:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:powerpoint_viewer:*:*:*:*:*:*:*:*
    • (no CPE)range: 2010 Service Pack 2 (32-bit editions)
    • (no CPE)range: Microsoft PowerPoint Viewer
  • cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*
    • (no CPE)
    • (no CPE)range: 2013 Service Pack 1
  • Range: 2016 for Mac
  • Range: Enterprise Server 2016

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.