Microsoft Issues Security Patch Update for 14 New Critical Vulnerabilities
60
CVE-2018-0852
—CVSS 3.0
8.8 high
EPSS
19%p97
Published
()
Modified
Description
Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Outlook handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0851.
- Vendors
- microsoft
- Products
- office, outlook
- Weakness
- CWE-787
- Vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news3 stories
60
60