CVE-2018-8501

8.8 highEPSS 20%

A remote code execution vulnerability exists in Microsoft PowerPoint software when the software fails to properly handle objects in Protected View, aka "Microsoft PowerPoint Remote Code Execution Vulnerability." This affects Office 365 ProPlus, PowerPoint Viewer, Microsoft Office, Microsoft PowerPoint.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 20% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2018-10-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:office
microsoft:office_365_proplus
microsoft:powerpoint
microsoft:powerpoint_viewer

References

http://www.securityfocus.com/bid/105497
http://www.securitytracker.com/id/1041838
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8501
http://www.securityfocus.com/bid/105497
http://www.securitytracker.com/id/1041838

Check your stack JSON