CVE-2018-0850: Microsoft Office

Medium severity, CVSS 6.5. EPSS: 5% chance of exploitation in the next 30 days.

Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run allow an elevation of privilege vulnerability due to how the format of incoming message is validated, aka "Microsoft Outlook Elevation of Privilege Vulnerability".

Affected products

• Microsoft Office: version 2016 only
• Microsoft Outlook: version 2007 only; version 2010 only; version 2013 only; version 2016 only

Published 2018-02-15. Last modified 2026-06-17.