CVE-2018-8245

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 16.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-06-14 · updated 2026-06-17

Description

A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher.

Affected products

Microsoft Publisher: 2010-sp2
Microsoft Publisher: 2010 Service Pack 2 (32-bit editions), 2010 Service Pack 2 (64-bit editions)

References

http://www.securityfocus.com/bid/104405
http://www.securitytracker.com/id/1041105
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8245
http://www.securityfocus.com/bid/104405
http://www.securitytracker.com/id/1041105
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8245

Get alerted when CVE-2018-8245 or the next vulnerability affects your stack