CVE-2018-8310

EPSS 5.4%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 5.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 jul 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A tampering vulnerability exists when Microsoft Outlook does not properly handle specific attachment types when rendering HTML emails, aka "Microsoft Office Tampering Vulnerability." This affects Microsoft Word, Microsoft Office.

Produtos afetados

Microsoft · Microsoft Office Microsoft · Microsoft Word

Referências

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8310 http://www.securityfocus.com/bid/104615 http://www.securitytracker.com/id/1041274