Vulnerability Details CVE-2018-0907
Microsoft Excel 2007 SP3, Microsoft Excel 2010 SP2, Microsoft Excel 2013 SP1, Microsoft Excel 2016, Microsoft Office 2016 Click-to-Run and Microsoft Office 2016 for Mac allow a security feature bypass vulnerability due to how macro settings are enforced, aka "Microsoft Office Excel Security Feature Bypass".
Exploit prediction scoring system (EPSS) score
EPSS Score 0.068
EPSS Ranking 90.8%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 6.8
Products affected by CVE-2018-0907
-
cpe:2.3:a:microsoft:excel:2007
-
cpe:2.3:a:microsoft:excel:2013
-
cpe:2.3:a:microsoft:excel:2016
-
cpe:2.3:a:microsoft:office:2016