CVE-2018-8574

7.8 highEPSS 19%

High (7.8) in microsoft. EPSS 19% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8577.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 19% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2018-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:office
microsoft:office_365_proplus

References

http://www.securityfocus.com/bid/105833
http://www.securitytracker.com/id/1042115
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8574
http://www.securityfocus.com/bid/105833
http://www.securitytracker.com/id/1042115

Check your stack JSON