CVE-2018-8587

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook.

CVSS v3.0

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

28.78% chance of exploitation in the next 30 days, 98th percentile

Published

2018-12-12

Updated

2024-08-05

Proof-of-concept exploits (1)

• Sunqiz/CVE-2018-8587-reproduction1★ · 2022-10-10

References

• CVE Record
• NVD entry

Related

• CVE-2010-2553
• CVE-2010-3333
• CVE-2011-0104
• CVE-2012-0158
• CVE-2013-2028
• CVE-2017-0199