High severity7.8NVD Advisory· Published Dec 12, 2018· Updated Jun 17, 2026

CVE-2018-8628

Description

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, Microsoft PowerPoint Viewer, Office Online Server, Microsoft SharePoint Server.

Affected products

Microsoft/Sharepoint Serverllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 2013 Service Pack 1
Microsoft/Officellm-fuzzy2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 365 ProPlus for 32-bit Systems
Microsoft/Powerpointllm-fuzzy
Microsoft/Office Visiocpe-rescue
Range: 2016 for Mac
Microsoft/Office Powerpoint Viewercpe-rescue2 versions
2010 Service Pack 2 (32-bit editions)+ 1 more
- (no CPE)range: 2010 Service Pack 2 (32-bit editions)
- (no CPE)range: Microsoft PowerPoint Viewer
Microsoft/Office SharePointcpe-rescue
Range: Enterprise Server 2016
Microsoft/Office Online Servercpe-rescue
Range: Office Online Server

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8628nvdPatchVendor Advisory
www.securityfocus.com/bid/106104nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.013
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000