Vulnerability Description
An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This CVE ID is unique from CVE-2018-8598.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Excel | 2010 |
| Microsoft | Excel Viewer | 2007 |
| Microsoft | Office | 2010 |
| Microsoft | Office 365 Proplus | - |
| Microsoft | Office Compatibility Pack | - |
| Microsoft | Sharepoint Server | 2010 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/106120Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8627PatchVendor Advisory
- http://www.securityfocus.com/bid/106120Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8627PatchVendor Advisory
FAQ
What is CVE-2018-8627?
CVE-2018-8627 is a vulnerability with a CVSS score of 5.5 (MEDIUM). An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Exc...
How severe is CVE-2018-8627?
CVE-2018-8627 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-8627?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Excel, Microsoft Excel Viewer, Microsoft Office, Microsoft Office 365 Proplus, Microsoft Office Compatibility Pack.