CVE-2018-0819: Microsoft Office

Medium severity, CVSS 6.5. EPSS: 5.7% chance of exploitation in the next 30 days.

Microsoft Office 2016 for Mac allows an attacker to send a specially crafted email attachment to a user in an attempt to launch a social engineering attack, such as phishing, due to how Outlook for Mac displays encoded email addresses, aka "Spoofing Vulnerability in Microsoft Office for Mac."

Affected products

• Microsoft Office: version 2016 only

Published 2018-01-10. Last modified 2026-06-17.