CVE-2018-8627: Use of Uninitialized Resource

An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Office 365 ProPlus,...

CVE-2018-8587: Undefined Security Weakness

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook...

CVE-2018-8636: Undefined Security Weakness

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from...

CVE-2018-8628: Undefined Security Weakness

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint...

CVE-2018-8628

CVE-2018-8628 is a remote code execution vulnerability affecting Microsoft PowerPoint and related Office components (Office, SharePoint, PowerPoint Viewer, etc.) caused by improper handling of objects in memory. The Nessus/OpenVAS entries confirm the vulnerability across PowerPoint and Office pro...

CVE-2018-8587

CVE-2018-8587 is a remote code execution vulnerability in Microsoft Outlookrelated products (Office/Outlook and Office 365 ProPlus) caused by improper handling of objects in memory. The connected Nessus/OpenVAS entries tie the flaw to Outlook components (including Outlook 2010/2013/2016 and Offic...

CVE-2018-8597

CVE-2018-8597 is a remote code execution vulnerability in Microsoft Excel/Office where improper handling of in-memory objects can allow arbitrary code execution in the context of the current user. Exploitation typically requires a user to open a specially crafted file, and affects Excel component...

CVE-2018-8598

CVE-2018-8598 is an information disclosure vulnerability in Microsoft Excel where memory contents can be exposed. Affected products include Office 365 ProPlus, Microsoft Office, and Microsoft Excel. The root cause is that Excel improperly discloses its memory contents. According to the provided d...

CVE-2018-8597

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from...

CVE-2018-8598: Undefined Security Weakness

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8627...

CVE-2018-8597: Undefined Security Weakness

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from...

PT-2018-2027

Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Office 365 ProPlus affected versions not specified Microsoft Office affected versions not specified Description A remote code execution issue exists in Microsoft Excel due to improper handling of...

PT-2018-2054

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions affected versions not specified Office 365 ProPlus versions affected versions not specified Microsoft Office versions affected versions not specified Description An information disclosure issue exists due to improper...

PT-2018-2115

Name of the Vulnerable Software and Affected Versions Microsoft Excel versions prior to the fixed version Office 365 ProPlus versions prior to the fixed version Microsoft Office versions prior to the fixed version Description A remote code execution issue exists in Microsoft Excel due to improper...

PT-2018-2019

Name of the Vulnerable Software and Affected Versions Microsoft Excel affected versions not specified Microsoft Office affected versions not specified Office 365 ProPlus affected versions not specified Microsoft Excel Viewer affected versions not specified Description An information disclosure...

PT-2018-2112

Name of the Vulnerable Software and Affected Versions Microsoft Outlook versions prior to the fixed version Office 365 ProPlus affected versions not specified Microsoft Office affected versions not specified Description The issue is related to errors in the mechanisms for handling objects in...

CVE-2018-8579

An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8558...

CVE-2018-8558

An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings configured via the SharePoint Online Admin Center, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is...

CVE-2018-8582

A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522,...

CVE-2018-8573

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8539...