A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Remote Code Execution Vulnerability." This affects Windows 7, Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Microsoft Excel Viewer, Microsoft PowerPoint Viewer, Windows Server 2019, Windows Server 2008 R2, Windows 10, Windows Server 2008.
Timeline
- CVE published
- Record last updated
- EPSS reached 10%
FIRST estimates at least a 10% chance of exploitation in the next 30 days
Affected versions
- Microsoft Windows 7
32-bit Systems Service Pack 1, x64-based Systems Service Pack 1
- Microsoft Microsoft Office
2016 for Mac, 2019 for 32-bit editions, 2019 for 64-bit editions, Compatibility Pack Service Pack 3
- Microsoft Microsoft Office Word Viewer
Version range not reported
- Microsoft Microsoft Excel Viewer
2007 Service Pack 3
- Microsoft Microsoft PowerPoint Viewer
2007
- Microsoft Windows Server 2019
Version range not reported
- Microsoft Office
365 ProPlus for 32-bit Systems, 365 ProPlus for 64-bit Systems
- Microsoft Windows Server 2008 R2
Itanium-Based Systems Service Pack 1, x64-based Systems Service Pack 1, x64-based Systems Service Pack 1 (Server Core installation)
- Microsoft Windows 10
Version 1809 for 32-bit Systems, Version 1809 for x64-based Systems
- Microsoft Windows Server 2008
32-bit Systems Service Pack 2, 32-bit Systems Service Pack 2 (Server Core installation), Itanium-Based Systems Service Pack 2, x64-based Systems Service Pack 2, x64-based Systems Service Pack 2 (Server Core installation)