Sin puntuación

CVE-2018-8429

Microsoft Microsoft Excel Viewer; Microsoft Microsoft Office; Microsoft Microsoft Excel Publicada: 2018-09-13 03:00 (hace 8 años)

Descripción

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Fabricante	Producto	Versiones
Microsoft	Microsoft Excel	2010 Service Pack 2 (32-bit editions), 2010 Service Pack 2 (64-bit editions), 2013 RT Service Pack 1, 2013 Service Pack 1 (32-bit editions), 2013 Service Pack 1 (64-bit editions), 2016 (32-bit edition), 2016 (64-bit edition)
Microsoft	Microsoft Excel Viewer	2007 Service Pack 3
Microsoft	Microsoft Office	2016 Click-to-Run (C2R) for 32-bit editions, 2016 Click-to-Run (C2R) for 64-bit editions, 2016 for Mac, Compatibility Pack Service Pack 3

Referencias y parches

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8429
105219 vdb-entry
1041630 vdb-entry

Puntuación CVSS

Aún sin puntuación. Aparecerá cuando la CNA, CISA o NVD la puntúen.

EPSS (probabilidad de explotación en 30 días)

12.26%

superior al 96 % de todas las CVE

Cronología

ID reservado2018-03-14
Publicada2018-09-13 03:00
Llegó a IP-DB2026-10-25 00:05
Última actualización2024-08-05 09:54

Asignada por (CNA): microsoft

Ver en la fuente: CVE.org · NVD

Reciba un aviso cuando estos productos tengan una vulnerabilidad nueva

Activar alertas por correo

Gratis · con cuenta · se desactiva cuando quiera

CVE recientes del mismo producto — Microsoft Office / 365 Apps

8.8Alta

CVE-2026-120003 hace 20 horas

Microsoft Office Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network.

8.8Alta

CVE-2026-120001 hace 20 horas

Microsoft Office PowerPoint Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.

6.5Media

CVE-2026-119999 hace 20 horas

Microsoft Office Excel Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office 365 for Mac; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.

7.8Alta

CVE-2026-119997 hace 20 horas

Microsoft Office Outlook Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code locally.

6.5Media

CVE-2026-119998 hace 20 horas

Microsoft Office Security Feature Bypass Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Product ui does not warn user of unsafe actions in Microsoft Office allows an unauthorized attacker to bypass a security feature over a network.

7.5Alta

CVE-2026-119995 hace 20 horas

Microsoft Office Outlook Remote Code Execution Vulnerability

Microsoft Microsoft 365 Apps for Enterprise; Microsoft Microsoft Office LTSC 2021; Microsoft Microsoft Office LTSC 2024

Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.