CVE-2018-8429

CWE-200 — Information Exposure4 documents4 sources

Severity

5.5MEDIUM

EPSS

20.4%

top 4.45%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Microsoft Excel Microsoft Microsoft Excel Viewer Microsoft Microsoft Office +4 more

Timeline

PublishedSep 13

Latest updateMay 14

Description

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages6 packages

▶NVDmicrosoft/excel_viewer2007

▶CVEListV5microsoft/microsoft_excel_viewer2007 Service Pack 3

▶NVDmicrosoft/excel2010, 2013, 2016+2

▶CVEListV5microsoft/microsoft_excel7 versions+6

▶NVDmicrosoft/office2016

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

GHSA

GHSA-xqvw-jp2q-crr2: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information↗2022-05-14

▶

CVEList

CVE-2018-8429: An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information↗2018-09-13

▶

📋Vendor Advisories

Microsoft

Microsoft Excel Information Disclosure Vulnerability↗2018-09-11

▶