CVE-2018-8382: Infoleak

Published Aug 15, 2018

Updated

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.

Affected Software

8 affected components

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Excel 2013 RT=sp1

Microsoft Excel Viewer=2007-sp3

Microsoft Office Mac=2016

Microsoft Office Compatibility Pack=sp3

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8382

Event History

Aug 15, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-8382?

CVE-2018-8382 is an information disclosure vulnerability in Microsoft Excel that allows improper disclosure of memory contents.

Which software is affected by CVE-2018-8382?

Microsoft Excel Viewer, Microsoft Office, and various versions of Microsoft Excel are affected by CVE-2018-8382.

What is the severity of CVE-2018-8382?

CVE-2018-8382 has a severity rating of 5.5, which is considered medium.

How can I fix CVE-2018-8382?

Apply the latest security updates provided by Microsoft to address the CVE-2018-8382 vulnerability.

Where can I find more information about CVE-2018-8382?

For more information about CVE-2018-8382, you can refer to the following sources: [SecurityFocus](http://www.securityfocus.com/bid/105000), [SecurityTracker](http://www.securitytracker.com/id/1041463), and [Microsoft Security Guidance Advisory](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8382).