CVE-2018-8627

MEDIUM

Microsoft Excel Use of Uninitialized Resource

Title source: VulnCheck
STIX 2.1 vulnerability

Record summary

CVE-2018-8627 has a selected CVSS score of 5.5 (medium).

Description

An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This CVE ID is unique from CVE-2018-8598.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jan 21, 2021 · VulnCheck
Reported exploitation
Observed · VulnCheck

Affected products and versions

5
ProductSourceVersion range

Excel

Browse Microsoft / Excel
VulnCheck, CVE ListServices on Microsoft SharePoint Server 2010 Service Pack 2affected

Microsoft Excel

Browse Microsoft / Microsoft Excel
CVE List2010 Service Pack 2 (32-bit editions)affected
2010 Service Pack 2 (64-bit editions)affected
2013 RT Service Pack 1affected
2013 Service Pack 1 (32-bit editions)affected
2013 Service Pack 1 (64-bit editions)affected
2016 (32-bit edition)affected
2016 (64-bit edition)affected

Microsoft Excel Viewer

Browse Microsoft / Microsoft Excel Viewer
CVE List2007 Service Pack 3affected

Microsoft Office

Browse Microsoft / Microsoft Office
CVE List2010 Service Pack 2 (32-bit editions)affected
2010 Service Pack 2 (64-bit editions)affected
2016 for Macaffected
2019 for 32-bit editionsaffected
2019 for 64-bit editionsaffected
2019 for Macaffected
Compatibility Pack Service Pack 3affected

Office

Browse Microsoft / Office
CVE List365 ProPlus for 32-bit Systemsaffected
365 ProPlus for 64-bit Systemsaffected

References

3