{"id":"CVE-2018-8575","published":"2018-11-14T01:00:00Z","modified":"2024-08-05T07:02:25Z","title":"A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in…","vendor":"Microsoft","product":"Microsoft Project","tier":"core","eol":null,"affectedVersions":[{"vendor":"Microsoft","product":"Microsoft Project","versions":["2010 Service Pack 2 (32-bit editions)","2010 Service Pack 2 (64-bit editions)","2016 (32-bit edition)","2016 (64-bit edition)"]},{"vendor":"Microsoft","product":"Office","versions":["365 ProPlus for 32-bit Systems","365 ProPlus for 64-bit Systems"]},{"vendor":"Microsoft","product":"Microsoft Project Server","versions":["2013 Service Pack 1 (32-bit edition)","2013 Service Pack 1 (64-bit edition)"]}],"description":{"text":"A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka \"Microsoft Project Remote Code Execution Vulnerability.\" This affects Microsoft Project, Office 365 ProPlus, Microsoft Project Server.","provenance":"source","from":"CVE.org"},"summary":{"text":"A flaw exists in the Microsoft Project software, where it fails to properly handle objects in memory, and it affects Microsoft Project, Office 365 ProPlus, and Microsoft Project Server. The available information does not specify the attack vector, authentication requirements, user interaction, or configuration conditions needed to exploit it, but successful exploitation would allow remote code execution.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:17:04Z"},"cvss":null,"epss":{"score":0.19546,"percentile":0.9737,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8575","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/105807","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.securitytracker.com/id/1042116","tags":["vdb-entry","x_refsource_SECTRACK"]}],"techniques":[{"id":"T1204.002","name":"Malicious File","tactics":["execution"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"exploitation_technique","evidence":[],"confidence":"high"},{"id":"T1566","name":"Phishing","tactics":["initial-access"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"exploitation_technique","evidence":[],"confidence":"high"},{"id":"T1068","name":"Exploitation for Privilege Escalation","tactics":["privilege-escalation"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"primary_impact","evidence":[],"confidence":"high"},{"id":"T1005","name":"Data from Local System","tactics":["collection"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"secondary_impact","evidence":[],"confidence":"high"},{"id":"T1136","name":"Create Account","tactics":["persistence"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"secondary_impact","evidence":[],"confidence":"high"},{"id":"T1485","name":"Data Destruction","tactics":["impact"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"secondary_impact","evidence":[],"confidence":"high"},{"id":"T1565","name":"Data Manipulation","tactics":["impact"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 2)","mappingType":"secondary_impact","evidence":[],"confidence":"high"}],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2018-20192","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-20192","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1566","T1204.002"],"provenance":"source"},{"stage":"primary","techniques":["T1068"],"provenance":"source"},{"stage":"secondary","techniques":["T1136","T1005","T1485","T1565"],"provenance":"source"}],"timeline":[{"date":"2018-11-14","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2018-8575","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":19.5,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.47,"detail":"percentile 0.9737"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}