CVE-2018-8427

5.5MEDIUM

Key Information:

Vendor
Microsoft
Status
Microsoft Office
Microsoft Office Word Viewer
Windows Server 2008
Microsoft Powerpoint Viewer
Vendor
CVE Published:
10 October 2018

Summary

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint Viewer, Microsoft Excel Viewer.

Affected Version(s)

Microsoft Excel Viewer 2007 Service Pack 3

Microsoft Office 2016 for Mac

Microsoft Office 2019 for 32-bit editions

References

http://www.securitytracker.com/id/1041823
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/105453
vdb-entryx_refsource_BID
https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_CONFIRM

EPSS Score

2% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.