CVE-2018-8247

An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests, aka "Microsoft Office Elevation of Privilege Vulnerability." This affects Microsoft Office, Microsoft Office Online Server. This CVE ID is unique from CVE-2018-8245.

Score

CVSS 3.0 5.4 Medium

Status

Modified - secure@microsoft.com

Published

2018-06-14

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Microsoft Office (Microsoft)
• Microsoft Office Online Server (Microsoft)
• Office Online Server (Microsoft)
• Office Web Apps (Microsoft)

References

• http://www.securityfocus.com/bid/104319
• http://www.securitytracker.com/id/1041104
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8247