Description
Multiple serious vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information.
Below is a complete list of vulnerabilities:
- An elevation of privilege vulnerability in Microsoft SharePoint can be exploited remotely via specially crafted web request to gain privileges.
- A remote code execution vulnerability in Microsoft PowerPoint can be exploited remotely via specially crafted file to execute arbitrary code.
- An information disclosure vulnerability in Microsoft Graphics Components can be exploited remotely via specially crafted file to obtain sensitive information.
- An elevation of privilege vulnerability in Microsoft SharePoint can be exploited remotely via specially crafted web request to gain privileges.
- A remote code execution vulnerability in Microsoft Graphics Components can be exploited remotely via specially crafted file to execute arbitrary code.
- An elevation of privilege vulnerability in Microsoft SharePoint can be exploited remotely via specially crafted web requests to gain privileges.
- An elevation of privilege vulnerability in Microsoft SharePoint can be exploited remotely via specially crafted web requests to gain privileges.
- A remote code execution vulnerability in Microsoft Word can be exploited remotely via specially crafted file to execute arbitrary code.
- A remote code execution vulnerability in Microsoft Excel can be exploited remotely via specially crafted file to execute arbitrary code.
Original advisories
- CVE-2018-8501
- CVE-2018-8427
- CVE-2018-8518
- CVE-2018-8432
- CVE-2018-8498
- CVE-2018-8480
- CVE-2018-8504
- CVE-2018-8502
- ADV180026
Related products
CVE list
- CVE-2018-8432 critical
- CVE-2018-8427 warning
- CVE-2018-8488 warning
- CVE-2018-8501 critical
- CVE-2018-8518 warning
- CVE-2018-8498 warning
- CVE-2018-8480 warning
- CVE-2018-8504 critical
- CVE-2018-8502 critical
KB list
- 4092464
- 4461448
- 4092481
- 4092482
- 4092477
- 4461466
- 4461447
- 4092444
- 4461449
- 4461457
- 4092439
- 4227167
- 4461460
- 4227170
- 4092453
- 4461450
- 4092437
- 4461440
- 4022138
- 4092483
- 4461437
- 4461434
- 4461445
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!