vulnerability
Microsoft CVE-2018-8430: Word PDF Remote Code Execution Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 9 | (AV:N/AC:M/Au:N/C:C/I:C/A:C) | Sep 11, 2018 | Sep 11, 2018 | Nov 19, 2018 |
Severity
9
CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Published
Sep 11, 2018
Added
Sep 11, 2018
Modified
Nov 19, 2018
Description
A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file. An attacker who successfully exploited the vulnerability could cause arbitrary code to execute in the context of the current user.
To exploit the vulnerability, an attacker must entice the user to open a specially crafted PDF file.
The update addresses the vulnerability by modifying how Microsoft Word parses PDF files.
Solutions
msft-kb4032246-ce231b16-c289-4786-9961-8002ea659d99msft-kb4032246-cf90e1fc-fc0a-47a1-84db-c9a33017e99d
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.