CVE-2018-8412

EPSS 1.2%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

15 Aug 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before executing them, aka "Microsoft (MAU) Office Elevation of Privilege Vulnerability." This affects Microsoft Office.

Affected products

Microsoft · Microsoft Office

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8412 http://www.securityfocus.com/bid/105014 http://www.securitytracker.com/id/1041484