CVE-2018-8247

Severity: medium (CVSS 5.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-06-14 · updated 2026-06-17
Weakness: CWE-79

Description

An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests, aka "Microsoft Office Elevation of Privilege Vulnerability." This affects Microsoft Office, Microsoft Office Online Server. This CVE ID is unique from CVE-2018-8245.

Affected products

Microsoft Office Online Server: 2016
Microsoft Office Web Apps: 2013-sp1
Microsoft Office: Web Apps Server 2013 Service Pack 1
Microsoft Office Online Server: 2016

References

http://www.securityfocus.com/bid/104319
http://www.securitytracker.com/id/1041104
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8247
http://www.securityfocus.com/bid/104319
http://www.securitytracker.com/id/1041104
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8247

Get alerted when CVE-2018-8247 or the next vulnerability affects your stack