CVE-2018-8427

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint Viewer, Microsoft Excel Viewer.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published
Oct 10, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-84285.4An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request tCVE-2018-84295.5An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel InCVE-2018-84307.8A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code ExecuCVE-2018-84315.4An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request tCVE-2018-84327.8A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft GraphicsCVE-2018-84334.7An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka "Microsoft GrapCVE-2018-84345.4An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authCVE-2018-84354.2A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-VCVE-2018-84366.2A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privCVE-2018-84376.2A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privCVE-2018-84386.8A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privCVE-2018-84398.4A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated us