CVE-2018-8558: Infoleak

Published Nov 14, 2018

Updated

An information disclosure vulnerability exists when Microsoft Outlook fails to respect "Default link type" settings configured via the SharePoint Online Admin Center, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8579.

Affected Software

2 affected components

Microsoft Office=2019

Microsoft Office 365 ProPlus

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8558

Event History

Nov 14, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-8558?

CVE-2018-8558 has a severity rating of Important according to Microsoft's security classification.

How do I fix CVE-2018-8558?

To fix CVE-2018-8558, you should apply the latest security updates provided by Microsoft for Office 365 ProPlus and Office 2019.

What software is impacted by CVE-2018-8558?

CVE-2018-8558 affects Microsoft Office 365 ProPlus and Microsoft Office 2019.

What type of vulnerability is CVE-2018-8558?

CVE-2018-8558 is an information disclosure vulnerability related to Microsoft Outlook's handling of default link types.

When was CVE-2018-8558 disclosed?

CVE-2018-8558 was disclosed in October 2018.