CVE-2018-8160

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Word, Microsoft Office.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
MicrosoftWordAutomation Services on Microsoft SharePoint Server 2010 Service Pack 2
MicrosoftMicrosoft Office2010 Service Pack 2 (32-bit editions); 2010 Service Pack 2 (64-bit editions); Compatibility Pack Service Pack 3; Web Apps Server 2010 Service Pack 2

References

Timeline

Published
May 9, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-81617.8A remote code execution vulnerability exists in Microsoft Office software when the software fails to properly handle objects in memory, aka CVE-2018-81627.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "CVE-2018-81635.5An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel InCVE-2018-81647.8An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k CVE-2018-81657.8An elevation of privilege vulnerability exists when the DirectX Graphics Kernel (DXGKRNL) driver improperly handles objects in memory, aka "CVE-2018-81667.0An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k CVE-2018-81677.0An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aCVE-2018-81685.4An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request tCVE-2018-81697.0An elevation of privilege vulnerability exists when the (Human Interface Device) HID Parser Library driver improperly handles objects in memCVE-2018-81707.0An elevation of privilege vulnerability exists in the way that the Windows kernel image handles objects in memory, aka "Windows Image ElevatCVE-2018-81717.5A Security Feature Bypass vulnerability exists in ASP.NET when the number of incorrect login attempts is not validated, aka "ASP.NET SecuritCVE-2018-81727.8A remote code execution vulnerability exists in Visual Studio software when the software does not check the source markup of a file for an u
CVE-2018-8160: Medium severity, CVSS 6.5 | Vulnix