CVE-2018-8579

An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8558.

Score

CVSS 3.0 6.5 Medium

Status

Modified - secure@microsoft.com

Published

2018-11-14

Last modified

2024-08-05

Affected products

• Microsoft Office (Microsoft)
• Office (Microsoft)
• Office 365 Proplus (Microsoft)

References

• http://www.securityfocus.com/bid/105828
• http://www.securitytracker.com/id/1042132
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8579