CVE-2018-8150 — Microsoft Office vulnerability
4 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
19.4%
top 4.61%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 9
Latest updateMay 13
Description
A security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter does not properly handle attachments, aka "Microsoft Outlook Security Feature Bypass Vulnerability." This affects Microsoft Office.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:NExploitability: 2.8 | Impact: 3.6
Affected Packages2 packages
▶CVEListV5microsoft/microsoft_office2016 Click-to-Run (C2R) for 32-bit editions, 2016 Click-to-Run (C2R) for 64-bit editions+1
Patches
🔴Vulnerability Details
2GHSA▶
GHSA-gcj2-8cp7-j4jx: A security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter does not properly handle attachments, aka "Microsoft↗2022-05-13
CVEList▶
CVE-2018-8150: A security feature bypass vulnerability exists when the Microsoft Outlook attachment block filter does not properly handle attachments, aka "Microsoft↗2018-05-09