Information Disclosure Vulnerability in Microsoft Office Products

CVE-2018-8427

Summary

An information disclosure vulnerability exists within Microsoft Graphics Components, which improperly handles objects in memory. This issue could allow an attacker to access sensitive information from affected Microsoft Office products, such as documents viewed or processed by applications like Microsoft Word, PowerPoint, or Excel. By specifically crafting a malicious file that exploits this vulnerability, attackers may gather data that should remain confidential. Users are encouraged to apply the latest security updates from Microsoft to mitigate this risk.

References