CVE-2018-8573

7.8 highEPSS 19%

A remote code execution vulnerability exists in Microsoft Word software when it fails to properly handle objects in memory, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft Word, Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8539.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 19% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2018-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:office
microsoft:office_365_proplus
microsoft:word

References

http://www.securityfocus.com/bid/105836
http://www.securitytracker.com/id/1042114
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8573
http://www.securityfocus.com/bid/105836
http://www.securitytracker.com/id/1042114

Check your stack JSON