CVE-2018-8245

A remote code execution vulnerability exists when Microsoft Publisher fails to utilize features that lock down the Local Machine zone when instantiating OLE objects, aka "Microsoft Publisher Remote Code Execution Vulnerability." This affects Microsoft Publisher.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
microsoftCNA
---
---
CVEADP
---
---
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
References
http://www.securityfocus.com/bid/104405
http://www.securitytracker.com/id/1041105
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8245
http://www.securityfocus.com/bid/104405
http://www.securitytracker.com/id/1041105
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8245