CVE-2018-8310

EPSS 5.4%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 5.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

11 Jul 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails, aka "Microsoft Office Tampering Vulnerability." This affects Microsoft Word, Microsoft Office.

Affected products

Microsoft · Microsoft Office Microsoft · Microsoft Word

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8310 http://www.securityfocus.com/bid/104615 http://www.securitytracker.com/id/1041274