Information Disclosure Vulnerability in Microsoft Excel Products
CVE-2018-8627

5.5MEDIUM

Key Information:

Vendor

Microsoft
Status
Microsoft Office
Microsoft Excel
Microsoft Excel Viewer
Excel
Vendor
CVE Published:
12 December 2018

What is CVE-2018-8627?

An information disclosure vulnerability in Microsoft Excel arises from an uninitialized variable allowing the software to read out of bound memory. This flaw could lead to the unintended disclosure of sensitive memory contents, potentially exposing confidential information to unauthorized parties. Users of Microsoft Office, Office 365 ProPlus, and related Excel applications should be cautious and ensure their systems are fully patched to mitigate any security risks.

Affected Version(s)

Excel Services on Microsoft SharePoint Server 2010 Service Pack 2

Microsoft Excel 2010 Service Pack 2 (32-bit editions)

Microsoft Excel 2010 Service Pack 2 (64-bit editions)

References

https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_CONFIRM
http://www.securityfocus.com/bid/106120
vdb-entryx_refsource_BID

EPSS Score

18% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.