CVE-2018-8245

EPSS 15.4%

Vexday Risk Score

8Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 15.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

14 Jun 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher.

Affected products

Microsoft · Microsoft Publisher

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8245 http://www.securityfocus.com/bid/104405 http://www.securitytracker.com/id/1041105