CVE-2018-8575

7.8 highEPSS 20%

High (7.8) in microsoft. EPSS 20% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka "Microsoft Project Remote Code Execution Vulnerability." This affects Microsoft Project, Office 365 ProPlus, Microsoft Project Server.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 20% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2018-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:office_365_proplus
microsoft:project

References

http://www.securityfocus.com/bid/105807
http://www.securitytracker.com/id/1042116
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8575
http://www.securityfocus.com/bid/105807
http://www.securitytracker.com/id/1042116

Check your stack JSON