CVE-2018-8597: microsoft excel
Vulnerability summary
CVE-2018-8597 is a high (CVSS 9.3) vulnerability in microsoft excel. EPSS estimates a 16.13% chance of exploitation in the next 30 days, higher than 96.8% of scored vulnerabilities.
Timeline
- 12-12-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8636.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
16.13%
Chance of exploitation in the next 30 days
Percentile
97%
Versus all other CVEs
30-day change
0.00 pp
From 16.13% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft6 products
- excel2010:sp2 | 2013:sp1 | 2016
- microsoft excel2010 Service Pack 2 (32-bit editions) | 2010 Service Pack 2 (64-bit editions) | 2013 RT Service Pack 1 | 2013 Service Pack 1 (32-bit editions) | 2013 Service Pack 1 (64-bit editions) | 2016 (32-bit edition) | 2016 (64-bit edition)
- microsoft office2010 Service Pack 2 (32-bit editions) | 2010 Service Pack 2 (64-bit editions) | 2016 for Mac | 2019 for 32-bit editions | 2019 for 64-bit editions | 2019 for Mac | Compatibility Pack Service Pack 3
- officeEOL365 ProPlus for 32-bit Systems | 365 ProPlus for 64-bit Systems | 2010:sp2 | 2016 | 2019
- office_365na
1 vendor · 6 products
References
2 links
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8597X Refsource CONFIRMPatchVendor Advisory