CVE-2018-8382 - CVE House
Back to Database
Status published Medium CVE-2018-8382

An information disclosure vulnerability exists when Microsoft Excel improperly discloses...

Vulnerability Description

An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-8382

Credits & Attribution

No credits recorded in the NVD database.

References

More from Microsoft

View All →
CVE-2025-9611
Microsoft Playwright MCP Server < 0.0.40 DNS Rebinding via Missing Origin Header Validation
High 7.2
CVE-2025-9491
Microsoft Windows LNK File UI Misrepresentation Remote Code Execution Vulnerability
High 7
CVE-2025-7326
EOL ASP.NET Core Elevation of Privilege Vulnerability
High 7
CVE-2025-65046
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Low 3.1
CVE-2025-65041
Microsoft Partner Center Elevation of Privilege Vulnerability
Critical 10

Affected Vendor

Affected Software

Microsoft Excel Viewer, Microsoft Office, Microsoft Excel
Vulnerable Versions:
2007 Service Pack 3, 2016 for Mac, Compatibility Pack Service Pack 3, 2010 Service Pack 2 (32-bit editions), 2010 Service Pack 2 (64-bit editions), 2013 RT Service Pack 1, 2013 Service Pack 1 (32-bit editions), 2013 Service Pack 1 (64-bit editions), 2016 (32-bit edition), 2016 (64-bit edition), 2016 Click-to-Run (C2R) for 32-bit editions, 2016 Click-to-Run (C2R) for 64-bit editions

Timeline

Official Publish: August 15th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.