CVE-2018-1011

9 documents5 sources

Severity

7.8HIGH

EPSS

33.9%

top 3.04%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Microsoft Excel Microsoft Excel Microsoft Excel RT

Timeline

PublishedApr 12

Latest updateMay 13

Description

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel. This CVE ID is unique from CVE-2018-0920, CVE-2018-1027, CVE-2018-1029.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages3 packages

▶NVDmicrosoft/excel2010, 2013+1

▶NVDmicrosoft/excel_rt2013

▶CVEListV5microsoft/microsoft_excel5 versions+4

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

GHSA

GHSA-6fvh-8xfr-8g25: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft↗2022-05-13

▶

CVEList

CVE-2018-1011: A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft↗2018-04-12

▶

📋Vendor Advisories

Microsoft

Microsoft Excel Remote Code Execution Vulnerability↗2018-04-10

▶