CVE-2018-0851: office 2007, 2016; +3 more affected products

Affected technology

office · 2007
microsoft

office · 2016
microsoft

office word viewer · Version not applicable in the source CPE
microsoft

outlook · 2010 · update sp2
microsoft

outlook · 2013 · update sp1
microsoft

outlook · 2016
microsoft

Microsoft Office · Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R).
Microsoft Corporation

Component: Not specified by the source

Attack conditions (NVD, CVSS 3.0): Network (remote) · No privileges required · User interaction required

What an attacker can do

The source reports that an attacker could run code remotely. NVD’s CVSS 3.0 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.