CVE-2018-0850

Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Outlook 2013, Microsoft Outlook 2016, and Microsoft Office 2016 Click-to-Run allow an elevation of privilege vulnerability due to how the format of incoming message is validated, aka "Microsoft Outlook Elevation of Privilege Vulnerability".

• http://www.securityfocus.com/bid/102866Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040382Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0850Patch, Vendor Advisory
• http://www.securityfocus.com/bid/102866Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040382Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0850Patch, Vendor Advisory

Published

Feb 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0844The Windows Common Log File System (CLFS) driver in Windows …
• CVE-2018-0845Equation Editor in Microsoft Office 2003, Microsoft Office 2…
• CVE-2018-0846The Windows Common Log File System (CLFS) driver in Windows …
• CVE-2018-0847Internet Explorer in Microsoft Windows 7 SP1, Windows Server…
• CVE-2018-0848Equation Editor in Microsoft Office 2003, Microsoft Office 2…
• CVE-2018-0849Equation Editor in Microsoft Office 2003, Microsoft Office 2…
• CVE-2018-0851Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Mic…
• CVE-2018-0852Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Micr…
• CVE-2018-0853Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT …
• CVE-2018-0854A security feature bypass vulnerability exists in Windows Sc…
• CVE-2018-0855The Microsoft Windows Embedded OpenType (EOT) font engine in…
• CVE-2018-0856Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 a…