CVE-2018-8247: Microsoft Office Online Server

Medium severity, CVSS 5.4. EPSS: 3.5% chance of exploitation in the next 30 days.

An elevation of privilege vulnerability exists when Office Web Apps Server 2013 and Office Online Server fail to properly handle web requests, aka "Microsoft Office Elevation of Privilege Vulnerability." This affects Microsoft Office, Microsoft Office Online Server. This CVE ID is unique from CVE-2018-8245.

Affected products

• Microsoft Office Online Server: version 2016 only
• Microsoft Office Web Apps: version 2013 only

Published 2018-06-14. Last modified 2026-06-17.