CVEvulnerability
CVE-2018-8429
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2018-09-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.5 MEDIUM — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.
Affected configurations
• microsoft excel 2010
• microsoft excel 2013
• microsoft excel 2016
• microsoft excel viewer 2007
• microsoft office 2016
• microsoft office compatibility pack
• microsoft office for mac 2016
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.securityfocus.com/bid/105219 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041630 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8429 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/105219 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041630 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8429 Patch, Vendor Advisory