CVE-2018-8245

2018-06-1412:00:00

microsoft

www.cve.org

6.8 Medium

AI Score

Confidence

High

0.293 Low

EPSS

Percentile

96.9%

JSON

A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka “Microsoft Publisher Remote Code Execution Vulnerability.” This affects Microsoft Publisher.

CNA Affected

[
  {
    "product": "Microsoft Publisher",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (32-bit editions)"
      },
      {
        "status": "affected",
        "version": "2010 Service Pack 2 (64-bit editions)"
      }
    ]
  }
]