CVE-2018-8598: Medium severity microsoft office excel vulnerability

Published Dec 12, 2018

Updated

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Excel. This CVE ID is unique from CVE-2018-8627.

Affected Software

6 affected components

Microsoft Excel=2010-sp2

Microsoft Excel=2013-sp1

Microsoft Excel=2016

Microsoft Office=2019

Microsoft Office 365 ProPlus

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8598

Event History

Dec 12, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-8598?

CVE-2018-8598 has a severity rating of Important according to Microsoft.

How do I fix CVE-2018-8598?

To fix CVE-2018-8598, update Microsoft Excel and Office products to the latest version available from Microsoft.

What is CVE-2018-8598?

CVE-2018-8598 is an information disclosure vulnerability in Microsoft Excel that can expose the contents of memory.

Which versions of Microsoft Excel are affected by CVE-2018-8598?

CVE-2018-8598 affects Microsoft Excel 2010 SP2, 2013 SP1, 2016, and the Office 365 ProPlus and Office 2019 products.

What kind of attacks exploit CVE-2018-8598?

CVE-2018-8598 could potentially be exploited by an attacker to read memory content associated with the current user.