CVE-2018-0852

Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run…

published February 15, 2018

CVSS
—
EPSS
19%
Percentile
97.3
In the wild
Unconfirmed
What it is

Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Outlook handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0851.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.19351 · 97.3th percentile
Published
2018-02-15T02:00Z
EPSS history
Timeline
  • 15 FEB 02:00Z
    Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Microsoft Outlook 2013 SP1 and RT SP1, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run…
    cvelistv5