CVSS: 9.3EPSS: 5%CPEs: 10EXPL: 0CVE-2018-8597 – Microsoft Office Excel XLS File Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2018-8597
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8636. Existe una vulnerabilidad de ejecución remota de código en Microsoft Excel cuando no gestiona correctamente objetos en la memoria. Esto también se conoce como "Microsoft Excel Remote Code Execution Vulnerability". • http://www.securityfocus.com/bid/106100 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8597 •
CVSS: 9.3EPSS: 7%CPEs: 6EXPL: 1CVE-2018-8587
https://notcve.org/view.php?id=CVE-2018-8587
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. Existe una vulnerabilidad de ejecución remota de código en el software de Microsoft Outlook cuando no gestiona correctamente objetos en la memoria. Esto también se conoce como "Microsoft Outlook Remote Code Execution Vulnerability". Esto afecta a Office 365 ProPlus, Microsoft Office y Microsoft Outlook. • https://github.com/Sunqiz/CVE-2018-8587-reproduction http://www.securityfocus.com/bid/106097 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8587 •
CVSS: 9.3EPSS: 5%CPEs: 15EXPL: 0CVE-2018-8628 – Microsoft Office PowerPoint PPT File Use-After-Free Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2018-8628
A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in memory, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, Microsoft PowerPoint Viewer, Office Online Server, Microsoft SharePoint Server. Existe una vulnerabilidad de ejecución remota de código en el software de Microsoft PowerPoint cuando no gestiona correctamente objetos en la memoria. Esto también se conoce como "Microsoft PowerPoint Remote Code Execution Vulnerability". Esto afecta a Microsoft Office, Office 365 ProPlus, Microsoft PowerPoint, Microsoft SharePoint, Microsoft PowerPoint Viewer, Office Online Server y Microsoft SharePoint Server. • http://www.securityfocus.com/bid/106104 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8628 •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2018-8558
https://notcve.org/view.php?id=CVE-2018-8558
An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings configured via the SharePoint Online Admin Center, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8579. Existe una vulnerabilidad de divulgación de información cuando Microsoft Outlook no respeta la opción "Default link type" configurada mediante el centro de administración online de SharePoint. Esto también se conoce como "Microsoft Outlook Information Disclosure Vulnerability". • http://www.securityfocus.com/bid/105826 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8558 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 25%CPEs: 6EXPL: 0CVE-2018-8522
https://notcve.org/view.php?id=CVE-2018-8522
A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8524, CVE-2018-8576, CVE-2018-8582. Existe una vulnerabilidad de ejecución remota de código en el software de Microsoft Outlook cuando no gestiona correctamente objetos en la memoria. Esto también se conoce como "Microsoft Outlook Remote Code Execution Vulnerability". • http://www.securityfocus.com/bid/105820 http://www.securitytracker.com/id/1042110 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8522 •