CVEvulnerability

CVE-2018-8378

5.5 MEDIUM Published 2018-08-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-08-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses
CWE-125, CWE-908

Description

An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Word, Microsoft SharePoint Server, Microsoft Office Word Viewer, Microsoft Excel Viewer, Microsoft SharePoint, Microsoft Office.

Affected configurations

• microsoft excel viewer 2007 • microsoft office 2010 • microsoft office 2013 • microsoft office 2016 • microsoft office compatibility pack • microsoft office web apps 2010 • microsoft office web apps 2013 • microsoft office word viewer • microsoft sharepoint enterprise server 2013 • microsoft sharepoint enterprise server 2016 • microsoft sharepoint server 2013 • microsoft word automation services

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-908 Use of Uninitialized Resource weakness

References