CVE-2018-8332

A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka "Win32k Graphics Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2016, Windows 8.1, Windows 10, Windows 10 Servers.

Published: Sep 13, 2018
Updated: Apr 13, 2023
CVE: CVE-2018-8332
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 8.8
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
microsoft / office_for_mac	2016	2016.x
microsoft / windows_10	1607	1607.x
microsoft / windows_7	--sp1	--sp1.x
microsoft / windows_10	1703	1703.x
microsoft / windows_server	2008-sp2	2008-sp2.x
microsoft / windows_10	1709	1709.x
microsoft / office	2016	2016.x
microsoft / windows_10	1803	1803.x
microsoft / windows_server	2012	2012.x
microsoft / windows_server	2012-r2	2012-r2.x
microsoft / windows_server	2008-r2	2008-r2.x
microsoft / windows_server	2016	2016.x
microsoft / windows_server	2016-1709	2016-1709.x
microsoft / windows_server	2016-1803	2016-1803.x

Vulnerability Database

289,599

CVE-2018-8332