Microsoft Excel Information Disclosure Vulnerability in Office Products
CVE-2018-8246
5.5MEDIUM
Key Information:
- Vendor
- Microsoft
- Vendor
- CVE Published:
- 14 June 2018
Summary
An information disclosure vulnerability exists in Microsoft Excel which improperly exposes the memory contents, potentially allowing unauthorized access to sensitive information. This flaw affects various Microsoft Office products, including Microsoft Excel Viewer and Microsoft Excel. Threat actors could exploit this vulnerability to access confidential data unintentionally exposed through memory leaks, posing significant risks to data security and user privacy.
References
CVSS V3.1
Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved