Skip to content
Sign in
CVE-2018-8504Not scored

CVE-2018-8504: Microsoft SharePoint Server vulnerability

Microsoft · Microsoft SharePoint Server

Affected: Microsoft SharePoint Server · Exploitation: likely to be exploited (10% or more)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

19.7%probability of exploitation in the next 30 days
97th percentile
050100

Higher than 97% of scored CVEs

Not scored yet. The CVE record carries no CVSS score.

DescriptionCVE.org

A remote code execution vulnerability exists in Microsoft Word software when the software fails to properly handle objects in Protected View, aka "Microsoft Word Remote Code Execution Vulnerability." This affects Microsoft SharePoint Server, Office 365 ProPlus, Microsoft Office, Microsoft Word.

Affected products4

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Microsoft · Microsoft SharePoint Server2010 Service Pack 2
  • Microsoft · Microsoft Office2010 Service Pack 2 (32-bit editions); 2010 Service Pack 2 (64-bit editions); 2013 RT Service Pack 1; 2013 Service Pack 1 (32-bit editions); 2013 Service Pack 1 (64-bit editions); 2016 (32-bit edition) and 4 more
  • Microsoft · Office365 ProPlus for 32-bit Systems; 365 ProPlus for 64-bit Systems
  • Microsoft · Microsoft Word2010 Service Pack 2 (32-bit editions); 2010 Service Pack 2 (64-bit editions); 2013 RT Service Pack 1; 2013 Service Pack 1 (32-bit editions); 2013 Service Pack 1 (64-bit editions); 2016 (32-bit edition) and 1 more

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Likely to be exploited (10% or more). EPSS gives it a 10% or higher chance of exploitation in the next 30 days.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
Microsoft
Published
October 2018

CoverageNo articles yet

No CyberSIXT article names CVE-2018-8504 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

Updated AboutDevelopersSign in