CVE-2018-0850

Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run allow an elevation of privilege vulnerability due to how the format of incoming message is validated, aka "Microsoft Outlook Elevation of Privilege Vulnerability".

Score

CVSS 3.0 6.5 Medium

Status

Modified - secure@microsoft.com

Published

2018-02-15

Last modified

2024-09-17

Affected products

• Office (Microsoft)
• Outlook (Microsoft)
• Microsoft Outlook (Microsoft Corporation)

References

• http://www.securityfocus.com/bid/102866
• http://www.securitytracker.com/id/1040382
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0850