CVE-2018-0919: Medium severity Microsoft Office vulnerability
Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2010 SP2, Microsoft Word 2010 SP2, Word 2013 SP1 and Microsoft Word 2016 allow an information disclosure vulnerability due to how variables are initialized, aka "Microsoft Office Information Disclosure Vulnerability".
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2018-0919?
CVE-2018-0919 is a vulnerability that affects Microsoft Office 2010 SP2, 2013 SP1, and 2016, as well as other related products.
What is the severity of CVE-2018-0919?
CVE-2018-0919 has a severity of medium with a CVSS score of 3.3.
How does CVE-2018-0919 impact Microsoft Office?
CVE-2018-0919 allows remote code execution when a user opens a specially crafted file using an affected version of Microsoft Office.
How can I protect myself from CVE-2018-0919?
To protect yourself from CVE-2018-0919, ensure that you have the latest security updates for Microsoft Office and exercise caution when opening files from unknown or untrusted sources.
Where can I find more information about CVE-2018-0919?
You can find more information about CVE-2018-0919 on the official Microsoft Security Guidance Advisory page.