Skip to content
OpenAdvisories
Unscored CVE-2018-0850 EUVD-2018-1650GHSA-fgf4-56m5-8934

Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run allo…

Published Feb 15, 2018 · Updated Sep 17, 2024 · Assigned by microsoft

Description

Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run allow an elevation of privilege vulnerability due to how the format of incoming message is validated, aka "Microsoft Outlook Elevation of Privilege Vulnerability".

Affected products

VendorProductAffectedFixed
Microsoft Microsoft Outlook Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run —

References