An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Excel Viewer, Microsoft Office, Microsoft Excel.

The Microsoft Office Compatibility Products are missing a security update. It is, therefore, affected by the following vulnerability :

  - An information disclosure vulnerability exists when     Microsoft Excel improperly discloses the contents of its     memory. An attacker who exploited the vulnerability     could use the information to compromise the users     computer or data.  (CVE-2018-8246)

The Microsoft Office Products are missing security updates.
It is, therefore, affected by multiple vulnerabilities :

  - An information disclosure vulnerability exists when     Microsoft Excel improperly discloses the contents of its     memory. An attacker who exploited the vulnerability     could use the information to compromise the users     computer or data.  (CVE-2018-8246)

  - A remote code execution vulnerability exists in     Microsoft Excel software when the software fails to     properly handle objects in memory. An attacker who     successfully exploited the vulnerability could run     arbitrary code in the context of the current user. If     the current user is logged on with administrative user     rights, an attacker could take control of the affected     system. An attacker could then install programs; view,     change, or delete data; or create new accounts with full     user rights.  (CVE-2018-8248)

The Microsoft Office Viewer Products are missing a security update. It is, therefore, affected by the following vulnerability :

  - An information disclosure vulnerability exists when     Microsoft Excel improperly discloses the contents of its     memory. An attacker who exploited the vulnerability     could use the information to compromise the users     computer or data.  (CVE-2018-8246)

The Microsoft Excel Products are missing a security update.
It is, therefore, affected by the following vulnerability :

  - An information disclosure vulnerability exists when     Microsoft Excel improperly discloses the contents of its     memory. An attacker who exploited the vulnerability     could use the information to compromise the users     computer or data.  (CVE-2018-8246)

ID	Name	Product	Family	Severity
110496	Security Updates for Microsoft Office Compatibility Products (June 2018)	Nessus	Windows : Microsoft Bulletins	medium
110495	Security Updates for Microsoft Office Products (June 2018)	Nessus	Windows : Microsoft Bulletins	high
110493	Security Updates for Microsoft Office Viewer Products (June 2018)	Nessus	Windows : Microsoft Bulletins	medium
110492	Security Updates for Microsoft Excel Products (June 2018)	Nessus	Windows : Microsoft Bulletins	medium

Detections

Analytics

CVE-2018-8246

medium

Tenable Plugins

medium

high

medium

medium