{"id":"CVE-2018-1007","aliases":["EUVD-2018-11669","GHSA-5qwh-c5rc-7f4v"],"status":"published","title":"An information disclosure vulnerability exists when Microsoft Office improperly discloses the...","description":"An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka \"Microsoft Office Information Disclosure Vulnerability.\" This affects Microsoft Office. This CVE ID is unique from CVE-2018-0950.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.06492,"percentile":0.93806,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-04-12T01:00:00Z","modified":"2026-06-17T01:50:16Z","products":[{"vendor":"microsoft","product":"microsoft office"},{"vendor":"microsoft","product":"office"}],"references":[{"url":"http://www.securityfocus.com/bid/103640","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040654","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1007","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1007"},{"url":"https://github.com/advisories/GHSA-5qwh-c5rc-7f4v"}],"sources":{"cve":[{"id":"CVE-2018-1007","description":"An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka \"Microsoft Office Information Disclosure Vulnerability.\" This affects Microsoft Office. This CVE ID is unique from CVE-2018-0950.","status":"published","published":"2018-04-12T01:00:00Z","modified":"2024-08-05T03:44:11.897Z","updated_at":"2026-11-02T14:35:09.139955Z"}],"euvd":[{"id":"EUVD-2018-11669","description":"An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka \"Microsoft Office Information Disclosure Vulnerability.\" This affects Microsoft Office. This CVE ID is unique from CVE-2018-0950.","status":"published","published":"2018-04-12T01:00:00Z","modified":"2024-08-05T03:44:11Z","updated_at":"2026-11-03T02:40:17.442322Z"}],"ghsa":[{"id":"GHSA-5qwh-c5rc-7f4v","title":"An information disclosure vulnerability exists when Microsoft Office improperly discloses the...","description":"An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka \"Microsoft Office Information Disclosure Vulnerability.\" This affects Microsoft Office. This CVE ID is unique from CVE-2018-0950.","status":"published","published":"2022-05-13T01:18:48Z","modified":"2023-02-01T05:05:28Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:50:15.334804Z"}],"nvd":[{"id":"CVE-2018-1007","description":"An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka \"Microsoft Office Information Disclosure Vulnerability.\" This affects Microsoft Office. This CVE ID is unique from CVE-2018-0950.","status":"published","published":"2018-04-12T01:29:09.283Z","modified":"2026-06-17T01:50:16.71Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:04:25.506659Z"}]}}