CVE-2018-8429: Infoleak

Published Sep 13, 2018

Updated

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.

Affected Software

8 affected components

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Excel Viewer=2007-sp3

Microsoft Office=2016

Microsoft Office Compatibility Pack=sp3

Microsoft Office for Mac=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8429

Event History

Sep 13, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2018-8429?

CVE-2018-8429 is an information disclosure vulnerability that exists in Microsoft Excel, which improperly discloses the contents of its memory.

Which products are affected by CVE-2018-8429?

Microsoft Excel Viewer, Microsoft Office, and Microsoft Excel versions 2010, 2013, and 2016 are affected by CVE-2018-8429.

What is the severity rating of CVE-2018-8429?

CVE-2018-8429 has a severity rating of medium, with a CVSS base score of 5.5.

How can I fix CVE-2018-8429?

Apply the latest security updates and patches provided by Microsoft to fix CVE-2018-8429.

Where can I find more information about CVE-2018-8429?

You can find more information about CVE-2018-8429 on the following links: [SecurityFocus](http://www.securityfocus.com/bid/105219), [SecurityTracker](http://www.securitytracker.com/id/1041630), [Microsoft Security Guidance](https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8429).