CVE-2018-8173

7.8 highEPSS 20%

A remote code execution vulnerability exists in Microsoft InfoPath when the software fails to properly handle objects in memory, aka "Microsoft InfoPath Remote Code Execution Vulnerability." This affects Microsoft Infopath.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 20% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2018-05-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:infopath

References

http://www.securityfocus.com/bid/104069
http://www.securitytracker.com/id/1040855
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8173
http://www.securityfocus.com/bid/104069
http://www.securitytracker.com/id/1040855

Check your stack JSON