{"id":"CVE-2018-8575","aliases":["EUVD-2018-20192","GHSA-j3w6-wp45-9wrf"],"status":"published","title":"A remote code execution vulnerability exists in Microsoft Project software when it fails to...","description":"A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka \"Microsoft Project Remote Code Execution Vulnerability.\" This affects Microsoft Project, Office 365 ProPlus, Microsoft Project Server.","severity":{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.19546,"percentile":0.97397,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-11-14T01:00:00Z","modified":"2026-06-17T02:05:07Z","products":[{"vendor":"microsoft","product":"microsoft project"},{"vendor":"microsoft","product":"microsoft project server"},{"vendor":"microsoft","product":"office"},{"vendor":"microsoft","product":"office_365_proplus"},{"vendor":"microsoft","product":"project"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8575","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/105807","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1042116","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8575"},{"url":"https://github.com/advisories/GHSA-j3w6-wp45-9wrf"}],"sources":{"cve":[{"id":"CVE-2018-8575","description":"A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka \"Microsoft Project Remote Code Execution Vulnerability.\" This affects Microsoft Project, Office 365 ProPlus, Microsoft Project Server.","status":"published","published":"2018-11-14T01:00:00Z","modified":"2024-08-05T07:02:25.601Z","updated_at":"2026-11-02T14:35:04.172099Z"}],"euvd":[{"id":"EUVD-2018-20192","description":"A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka \"Microsoft Project Remote Code Execution Vulnerability.\" This affects Microsoft Project, Office 365 ProPlus, Microsoft Project Server.","status":"published","published":"2018-11-14T01:00:00Z","modified":"2024-08-05T07:02:25Z","updated_at":"2026-11-03T02:40:02.008103Z"}],"ghsa":[{"id":"GHSA-j3w6-wp45-9wrf","title":"A remote code execution vulnerability exists in Microsoft Project software when it fails to...","description":"A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka \"Microsoft Project Remote Code Execution Vulnerability.\" This affects Microsoft Project, Office 365 ProPlus, Microsoft Project Server.","status":"published","published":"2022-05-13T01:21:00Z","modified":"2023-02-01T05:06:16Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:50:20.282326Z"}],"nvd":[{"id":"CVE-2018-8575","description":"A remote code execution vulnerability exists in Microsoft Project software when it fails to properly handle objects in memory, aka \"Microsoft Project Remote Code Execution Vulnerability.\" This affects Microsoft Project, Office 365 ProPlus, Microsoft Project Server.","status":"published","published":"2018-11-14T01:29:01.77Z","modified":"2026-06-17T02:05:07.883Z","cvss":[{"version":"3.0","score":7.8,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:04:47.196456Z"}]}}