CVE-2018-8160: Infoleak

Published May 9, 2018

Updated

An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Word, Microsoft Office.

Affected Software

4 affected components

Microsoft Office=2010-sp2

Microsoft Office Compatibility Pack=sp3

Microsoft SharePoint Server=2010-sp2

Microsoft Web Applications=2010-sp2

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8160

Event History

May 9, 2018

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

DescriptionWeakness

Data Sourced

via NVD·07:29 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2018-8160?

CVE-2018-8160 is an information disclosure vulnerability in Microsoft Outlook when a message is opened.

What is the severity of CVE-2018-8160?

The severity of CVE-2018-8160 is medium with a CVSS score of 6.5.

Which software is affected by CVE-2018-8160?

Microsoft Office 2010 SP2, Microsoft Office Compatibility Pack SP3, Microsoft SharePoint Server 2010 SP2, and Microsoft Web Applications 2010 SP2 are affected by CVE-2018-8160.

How does CVE-2018-8160 impact Outlook?

CVE-2018-8160 allows attackers to disclose information in Outlook when a message is opened.

Are there any references for CVE-2018-8160?

Yes, you can refer to the following links for more information: http://www.securityfocus.com/bid/104051, http://www.securitytracker.com/id/1040852, https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8160.