CVE-2018-8246: Infoleak

Published Jun 14, 2018

Updated

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.

Affected Software

8 affected components

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Excel Viewer

Microsoft Office=2010-sp2

Microsoft Office=2016

Microsoft Office Compatibility Pack=sp3

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8246

Event History

Jun 14, 2018

CVE Published

via MITRE·12:00 PM

Data Sourced

via MITRE·12:00 PM

Description

Data Sourced

via NVD·12:29 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2018-8246?

CVE-2018-8246 is an information disclosure vulnerability in Microsoft Excel that allows the improper disclosure of memory contents.

Which software is affected by CVE-2018-8246?

The affected software includes Microsoft Excel Viewer, Microsoft Office (2010 SP2, 2013 SP1, 2016), and Microsoft Excel (2010 SP2, 2013 SP1, 2016).

What is the severity of CVE-2018-8246?

CVE-2018-8246 has a severity rating of medium with a score of 5.5.

How does CVE-2018-8246 work?

CVE-2018-8246 works by exploiting a vulnerability in Microsoft Excel that allows the unauthorized disclosure of memory contents.

Is there a fix available for CVE-2018-8246?

Yes, Microsoft has released patches and updates to address the vulnerability in the affected software versions.