CVE-2018-8247

5.4 mediumEPSS 3.9%

An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests, aka "Microsoft Office Elevation of Privilege Vulnerability." This affects Microsoft Office, Microsoft Office Online Server. This CVE ID is unique from CVE-2018-8245.

Severity

CVSS 3.0

5.4 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

EPSS: 3.9% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2018-06-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:office_online_server
microsoft:office_web_apps

References

http://www.securityfocus.com/bid/104319
http://www.securitytracker.com/id/1041104
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8247
http://www.securityfocus.com/bid/104319
http://www.securitytracker.com/id/1041104

Check your stack JSON