Microsoft Excel Information Disclosure Vulnerability in Office Products
CVE-2018-8246

5.5MEDIUM

Key Information:

Vendor
Microsoft
Vendor
CVE Published:
14 June 2018

Summary

An information disclosure vulnerability exists in Microsoft Excel which improperly exposes the memory contents, potentially allowing unauthorized access to sensitive information. This flaw affects various Microsoft Office products, including Microsoft Excel Viewer and Microsoft Excel. Threat actors could exploit this vulnerability to access confidential data unintentionally exposed through memory leaks, posing significant risks to data security and user privacy.

References

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.