CVE-2018-8587

7.8 highEPSS 29%

High (7.8) in microsoft. EPSS 29% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 29% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
Published: 2018-12-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:office
microsoft:office_365_proplus

References

http://www.securityfocus.com/bid/106097
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8587
http://www.securityfocus.com/bid/106097
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8587

Check your stack JSON