CVE-2018-8429

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
MicrosoftMicrosoft Excel Viewer2007 Service Pack 3
MicrosoftMicrosoft Office2016 Click-to-Run (C2R) for 32-bit editions; 2016 Click-to-Run (C2R) for 64-bit editions; 2016 for Mac; Compatibility Pack Service Pack 3
MicrosoftMicrosoft Excel2010 Service Pack 2 (32-bit editions); 2010 Service Pack 2 (64-bit editions); 2013 RT Service Pack 1; 2013 Service Pack 1 (32-bit editions); 2013 Service Pack 1 (64-bit editions); 2016 (32-bit edition); 2016 (64-bit edition)

References

Timeline

Published
Sep 13, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-84307.8A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code ExecuCVE-2018-84315.4An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request tCVE-2018-84327.8A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft GraphicsCVE-2018-84334.7An information disclosure vulnerability exists when the Windows Graphics component improperly handles objects in memory, aka "Microsoft GrapCVE-2018-84345.4An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an authCVE-2018-84354.2A security feature bypass vulnerability exists when Windows Hyper-V BIOS loader fails to provide a high-entropy source, aka "Windows Hyper-VCVE-2018-84366.2A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privCVE-2018-84376.2A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privCVE-2018-84386.8A denial of service vulnerability exists when Microsoft Hyper-V Network Switch on a host server fails to properly validate input from a privCVE-2018-84398.4A remote code execution vulnerability exists when Windows Hyper-V on a host server fails to properly validate input from an authenticated usCVE-2018-84407.8An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ACVE-2018-84417.8An elevation of privilege vulnerability exists due to an integer overflow in Windows Subsystem for Linux, aka "Windows Subsystem for Linux E
CVE-2018-8429: Medium severity, CVSS 5.5 | Vulnix