CVE-2018-8378
An information disclosure vulnerability exists when Microsoft Office software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Word, Microsoft SharePoint Server, Microsoft Office Word Viewer, Microsoft Excel Viewer, Microsoft SharePoint, Microsoft Office.
Published:Aug 15, 2018
Last Modified:Nov 21, 2024
EPS:Aug 15, 2018
EPSS Score:0.23003
CVSS Score:5.5
Affected Products
Vendor
Product
Action
Vendor
Microsoft
Product
Excel Viewer
Microsoft
Excel Viewer
Vendor
Microsoft
Product
Office
Microsoft
Office
Vendor
Microsoft
Product
Office Compatibility Pack
Microsoft
Office Compatibility Pack
Vendor
Microsoft
Product
Office Web Apps
Microsoft
Office Web Apps
Vendor
Microsoft
Product
Office Word Viewer
Microsoft
Office Word Viewer
Vendor
Microsoft
Product
Sharepoint Enterprise Server 2013
Microsoft
Sharepoint Enterprise Server 2013
Vendor
Microsoft
Product
Sharepoint Enterprise Server 2016
Microsoft
Sharepoint Enterprise Server 2016
Vendor
Microsoft
Product
Sharepoint Server
Microsoft
Sharepoint Server
Vendor
Microsoft
Product
Word Automation Services
Microsoft
Word Automation Services
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
