CVE-2018-8245

7.8 highEPSS 17%

A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 17% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2018-06-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:publisher

References

http://www.securityfocus.com/bid/104405
http://www.securitytracker.com/id/1041105
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8245
http://www.securityfocus.com/bid/104405
http://www.securitytracker.com/id/1041105

Check your stack JSON