cvelist/2018/8xxx/CVE-2018-8412.json

{
    "CVE_data_meta": {
        "ASSIGNER": "secure@microsoft.com",
        "ID": "CVE-2018-8412",
        "STATE": "PUBLIC"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "product": {
                        "product_data": [
                            {
                                "product_name": "Microsoft Office",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_value": "2016 for Mac"
                                        }
                                    ]
                                }
                            }
                        ]
                    },
                    "vendor_name": "Microsoft"
                }
            ]
        }
    },
    "data_format": "MITRE",
    "data_type": "CVE",
    "data_version": "4.0",
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "An elevation of privilege vulnerability exists when the Microsoft AutoUpdate (MAU) application for Mac improperly validates updates before executing them, aka \"Microsoft (MAU) Office Elevation of Privilege Vulnerability.\" This affects Microsoft Office."
            }
        ]
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "Elevation of Privilege"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8412",
                "refsource": "CONFIRM",
                "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8412"
            },
            {
                "name": "1041484",
                "refsource": "SECTRACK",
                "url": "http://www.securitytracker.com/id/1041484"
            },
            {
                "name": "105014",
                "refsource": "BID",
                "url": "http://www.securityfocus.com/bid/105014"
            }
        ]
    }
}