CVEvulnerability
CVE-2018-8246
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-06-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.
Affected configurations
• microsoft excel 2010
• microsoft excel 2013
• microsoft excel 2016
• microsoft excel viewer
• microsoft office 2010
• microsoft office 2016
• microsoft office compatibility pack
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securityfocus.com/bid/104322 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041109 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8246 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/104322 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041109 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8246 Patch, Vendor Advisory