Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2018-8575

A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka "Microsoft Project Remote Code Execution Vulnerability." This affects Microsoft Project, Office 365 ProPlus, Microsoft Project Server.

  • Published: Nov 14, 2018
  • Updated: Apr 13, 2023
  • CVE: CVE-2018-8575
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 9.3
  • AV:N/AC:M/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
microsoft / project 2016 2016.x
microsoft / project 2010-sp2 2010-sp2.x
microsoft / project 2013-sp1 2013-sp1.x