CVE-2018-8627

An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This CVE ID is unique from CVE-2018-8598.

Score

CVSS 3.0 5.5 Medium

Status

Modified - secure@microsoft.com

Published

2018-12-12

Last modified

2024-08-05

Weaknesses

CWE-908

Affected products

• Excel (Microsoft)
• Excel Viewer (Microsoft)
• Microsoft Excel (Microsoft)
• Microsoft Excel Viewer (Microsoft)
• Microsoft Office (Microsoft)
• Office (Microsoft)
• Office 365 Proplus (Microsoft)
• Office Compatibility Pack (Microsoft)
• Sharepoint Server (Microsoft)

References

• http://www.securityfocus.com/bid/106120
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8627