CVE-2018-8244

6.5 mediumEPSS 5.8%

An elevation of privilege vulnerability exists when Microsoft Outlook does not validate attachment headers properly, aka "Microsoft Outlook Elevation of Privilege Vulnerability." This affects Microsoft Office, Microsoft Outlook.

Severity

CVSS 3.0

6.5 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 5.8% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2018-06-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:office
microsoft:outlook
microsoft:outlook_rt

References

http://www.securityfocus.com/bid/104323
http://www.securitytracker.com/id/1041107
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8244
http://www.securityfocus.com/bid/104323
http://www.securitytracker.com/id/1041107

Check your stack JSON