Back to feed
EUVD-2018-20239 · Published Dec 12, 2018
An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This CVE ID is unique from CVE-2018-8598.
Technologies
Microsoft Office 365 ProplusMicrosoft OfficeMicrosoft ExcelMicrosoft Office Compatibility PackMicrosoft Excel ViewerMicrosoft Sharepoint Server
Weaknesses
CWE-908
CVSS scores
- v3.05.5
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N - v2.04.3
AV:N/AC:M/Au:N/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
