CVE-2018-8176

8.8 highEPSS 24%

High (8.8) in microsoft office for mac. EPSS 24% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly validate XML content, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Microsoft Office.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 24% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2018-05-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:office_for_mac

References

http://www.securityfocus.com/bid/104184
http://www.securitytracker.com/id/1040937
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8176
http://www.securityfocus.com/bid/104184
http://www.securitytracker.com/id/1040937

Check your stack JSON