CVE-2018-0793 is a remote code execution vulnerability affecting Microsoft Outlook 2007, 2010, and 2013, stemming from how email messages are parsed. This high-severity vulnerability (CVSS 7.8) can lead to complete compromise of confidentiality, integrity, and availability, requiring user interaction (e.g., opening a malicious email) for exploitation. While no public exploit code or active exploitation has been confirmed, its high FAUCET Risk Score of 95/100 and mention in security news indicate significant potential risk and community awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2010CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:* | ||
2016CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:* | ||
2016CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2016:c2r:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:* | ||
2007CPE matchmatch criteria | cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.