CVE-2018-8539

CVE-2018-8539 is a remote code execution vulnerability in Microsoft Word that allows an attacker to execute arbitrary code when the software improperly handles objects in memory. This high-severity flaw (CVSS 7.8) primarily impacts Microsoft Office and SharePoint Server, requiring user interaction (e.g., opening a malicious document) for successful exploitation. While no public exploit code is readily available (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness. There is no evidence of active exploitation in the wild, and it is not listed on CISA's KEV catalog.