{"id":"CVE-2018-1037","aliases":["EUVD-2018-11697","GHSA-mrwc-m279-7475"],"status":"published","title":"An information disclosure vulnerability exists when Visual Studio improperly discloses limited...","description":"An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka \"Microsoft Visual Studio Information Disclosure Vulnerability.\" This affects Microsoft Visual Studio.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05818,"percentile":0.93197,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-908"],"published":"2018-04-12T01:00:00Z","modified":"2026-06-17T01:50:20Z","products":[{"vendor":"microsoft","product":"microsoft visual studio"},{"vendor":"microsoft","product":"visual_studio"},{"vendor":"microsoft","product":"visual_studio_2017"}],"references":[{"url":"http://www.securitytracker.com/id/1040664","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1037","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/103715","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1037"},{"url":"https://github.com/advisories/GHSA-mrwc-m279-7475"}],"sources":{"cve":[{"id":"CVE-2018-1037","description":"An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka \"Microsoft Visual Studio Information Disclosure Vulnerability.\" This affects Microsoft Visual Studio.","status":"published","published":"2018-04-12T01:00:00Z","modified":"2024-08-05T03:44:11.975Z","updated_at":"2026-11-02T14:35:09.139955Z"}],"euvd":[{"id":"EUVD-2018-11697","description":"An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka \"Microsoft Visual Studio Information Disclosure Vulnerability.\" This affects Microsoft Visual Studio.","status":"published","published":"2018-04-12T01:00:00Z","modified":"2024-08-05T03:44:11Z","updated_at":"2026-11-03T02:40:17.442322Z"}],"ghsa":[{"id":"GHSA-mrwc-m279-7475","title":"An information disclosure vulnerability exists when Visual Studio improperly discloses limited...","description":"An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka \"Microsoft Visual Studio Information Disclosure Vulnerability.\" This affects Microsoft Visual Studio.","status":"published","published":"2022-05-13T01:07:07Z","modified":"2023-02-01T05:03:12Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T14:50:01.590535Z"}],"nvd":[{"id":"CVE-2018-1037","description":"An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka \"Microsoft Visual Studio Information Disclosure Vulnerability.\" This affects Microsoft Visual Studio.","status":"published","published":"2018-04-12T01:29:10.423Z","modified":"2026-06-17T01:50:20.27Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T14:04:25.506659Z"}]}}