CVE-2018-8331

7.8 highEPSS 20%

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Office.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 20% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2018-09-13
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:excel
microsoft:office

References

http://www.securityfocus.com/bid/105206
http://www.securitytracker.com/id/1041630
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8331
http://www.securityfocus.com/bid/105206
http://www.securitytracker.com/id/1041630

Check your stack JSON