CVE-2018-8577

CVE-2018-8577 affects Microsoft Excel (and related Office components). The vulnerability arises when Excel fails to properly handle objects in memory, enabling a remote code execution where an attacker could run arbitrary code in the context of the current user. CVSSv3 vector indicates a local at...

CVE-2018-8573

CVE-2018-8573 is a remote code execution vulnerability in Microsoft Word/Office products caused by improper handling of objects in memory. The vulnerability could allow an attacker to execute arbitrary code in the security context of the current user when a specially crafted file is opened. Multi...

CVE-2018-8558

CVE-2018-8558 is an information disclosure vulnerability in Microsoft Outlook related to not respecting the SharePoint Online Admin Center “Default link type” settings. Affected products include Office 365 ProPlus and Microsoft Office. Root cause, per available description, is improper handling o...

CVE-2018-8576

CVE-2018-8576 is a remote code execution vulnerability in Microsoft Outlook that occurs when Outlook fails to properly handle objects in memory. Affected products include Office 365 ProPlus, Microsoft Office, and Microsoft Outlook. The underlying issue is improper handling of in-memory objects, e...

CVE-2018-8579

An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8558...

CVE-2018-8608

CVE-2018-8608 is a cross-site scripting vulnerability in Microsoft Dynamics 365 (on-premises) 8.x caused by improper sanitization of a specially crafted web request to an affected Dynamics server. Affected software is Microsoft Dynamics 365 (on-premises) version 8 prior to 8.2.3.0008. The vulnera...

CVE-2018-8608

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 on-premises version 8 Cross Site Scripting Vulnerability." This affects Microsoft...

CVE-2018-8609

CVE-2018-8609 is a remote code execution vulnerability in Microsoft Dynamics 365 (on-premises) version 8 . The server fails to properly sanitize web requests to the affected Dynamics server, allowing an authenticated attacker to execute arbitrary code in the context of the SQL service account by ...

CVE-2018-8605

Microsoft Dynamics 365 (on-premises), version 8.x prior to 8.2.3.0008, is affected by multiple vulnerabilities including cross-site scripting (CVE-2018-8605, CVE-2018-8606, CVE-2018-8607, CVE-2018-8608) and other issues (CVE-2018-8654, CVE-2018-8609). The Nessus entry consolidates affected versio...

CVE-2018-8609

A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises version 8 when the server fails to properly sanitize web requests to an affected Dynamics server, aka "Microsoft Dynamics 365 on-premises version 8 Remote Code Execution Vulnerability." This affects Microsoft...

CVE-2018-8524

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-852...

CVE-2018-8573

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8539...

CVE-2018-8577

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This...

CVE-2018-8607

CVE-2018-8607 describes a cross-site scripting (XSS) vulnerability in Microsoft Dynamics 365 (on-premises) 8.x . The issue arises because the web server does not properly sanitize a specially crafted web request to an affected Dynamics server. Affected product/version: Microsoft Dynamics 365 (on-...

CVE-2018-8582

CVE-2018-8582 is a remote code execution flaw in Microsoft Outlook that arises when parsing specially crafted rule export files. The underlying issue is in Outlook’s handling of objects during parsing, allowing an attacker to execute arbitrary code on the affected system. A successful exploit cou...

CVE-2018-8606

MODE C: Affected product is Microsoft Dynamics 365 (on-premises) 8.x. The issue is a Cross-Site Scripting vulnerability caused by improper sanitization of certain web requests to the Dynamics server (CVE-2018-8606). Impact is web-based script execution in a user’s browser session when a user is e...

CVE-2018-8524: Undefined Security Weakness

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-852...

CVE-2018-8609: Improper Encoding or Escaping of Output

A remote code execution vulnerability exists in Microsoft Dynamics 365 on-premises version 8 when the server fails to properly sanitize web requests to an affected Dynamics server, aka "Microsoft Dynamics 365 on-premises version 8 Remote Code Execution Vulnerability." This affects Microsoft...

CVE-2018-8575: Undefined Security Weakness

A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka "Microsoft Project Remote Code Execution Vulnerability." This affects Microsoft Project, Office 365 ProPlus, Microsoft Project Server...

CVE-2018-8607: Improper Neutralization of Input During Web Page Generation

A cross site scripting vulnerability exists when Microsoft Dynamics 365 on-premises version 8 does not properly sanitize a specially crafted web request to an affected Dynamics server, aka "Microsoft Dynamics 365 on-premises version 8 Cross Site Scripting Vulnerability." This affects Microsoft...