CVE-2018-0919
First published: Wed Mar 14 2018(Updated: )
Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for Mac, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps 2013 SP1, Microsoft SharePoint Enterprise Server 2013 SP1, Microsoft SharePoint Enterprise Server 2016, Microsoft SharePoint Server 2010 SP2, Microsoft Word 2010 SP2, Word 2013 SP1 and Microsoft Word 2016 allow an information disclosure vulnerability due to how variables are initialized, aka "Microsoft Office Information Disclosure Vulnerability".
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Office | =2010-sp2 | |
| Microsoft Office | =2016 | |
| Microsoft Office | =2016 | |
| Microsoft Office Online Server | =2016 | |
| Microsoft Office Web Apps | =2010-sp2 | |
| Microsoft Office Web Apps Server | =2013-sp1 | |
| Microsoft SharePoint Enterprise Server | =2013-sp1 | |
| Microsoft SharePoint Enterprise Server | =2016 | |
| Microsoft SharePoint Server | =2010-sp2 | |
| Microsoft Word | =2010-sp2 | |
| Microsoft Word | =2013-sp1 | |
| Microsoft Word | =2013-sp1 | |
| Microsoft Word | =2016 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2018-0919?
CVE-2018-0919 is a vulnerability that affects Microsoft Office 2010 SP2, 2013 SP1, and 2016, as well as other related products.
What is the severity of CVE-2018-0919?
CVE-2018-0919 has a severity of medium with a CVSS score of 3.3.
How does CVE-2018-0919 impact Microsoft Office?
CVE-2018-0919 allows remote code execution when a user opens a specially crafted file using an affected version of Microsoft Office.
How can I protect myself from CVE-2018-0919?
To protect yourself from CVE-2018-0919, ensure that you have the latest security updates for Microsoft Office and exercise caution when opening files from unknown or untrusted sources.
Where can I find more information about CVE-2018-0919?
You can find more information about CVE-2018-0919 on the official Microsoft Security Guidance Advisory page.
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/type
- agent/description
- agent/event
- agent/remedy
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft office
- version/microsoft office/2010-sp2
- version/microsoft office/2016
- canonical/microsoft office online server
- version/microsoft office online server/2016
- canonical/microsoft office web apps
- version/microsoft office web apps/2010-sp2
- canonical/microsoft office web apps server
- version/microsoft office web apps server/2013-sp1
- canonical/microsoft sharepoint enterprise server
- version/microsoft sharepoint enterprise server/2013-sp1
- version/microsoft sharepoint enterprise server/2016
- canonical/microsoft sharepoint server
- version/microsoft sharepoint server/2010-sp2
- canonical/microsoft word
- version/microsoft word/2010-sp2
- version/microsoft word/2013-sp1
- version/microsoft word/2016