CVE-2018-8160
At a glance Severity Not available EPSS EPSS 8.46 % · percentile 95 (2026-10-27) State PUBLISHED Published 2018-05-09 Updated 2024-08-05 Assigner microsoft NVD status Modified
Description An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Word, Microsoft Office.
Scores Version Score Vector Scored by CVSS 3.0 MEDIUM 6.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*cpe:2.3:a:microsoft:web_applications:2010:sp2:*:*:*:*:*:*
Affected products Product Versions Microsoft · Word affected Automation Services on Microsoft SharePoint Server 2010 Service Pack 2 Microsoft · Microsoft Office affected 2010 Service Pack 2 (32-bit editions) ; affected 2010 Service Pack 2 (64-bit editions) ; affected Compatibility Pack Service Pack 3 ; affected Web Apps Server 2010 Service Pack 2
References
Sources