{"id":"CVE-2018-8427","aliases":["EUVD-2018-20063","GHSA-ch57-57p3-fhm7"],"status":"published","title":"An information disclosure vulnerability exists in the way that Microsoft Graphics Components...","description":"An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka \"Microsoft Graphics Components Information Disclosure Vulnerability.\" This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint Viewer, Microsoft Excel Viewer.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.02293,"percentile":0.83345,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2018-10-10T13:00:00Z","modified":"2026-06-17T02:04:50Z","products":[{"vendor":"microsoft","product":"excel_viewer"},{"vendor":"microsoft","product":"microsoft excel viewer"},{"vendor":"microsoft","product":"microsoft office"},{"vendor":"microsoft","product":"microsoft office word viewer"},{"vendor":"microsoft","product":"microsoft powerpoint viewer"},{"vendor":"microsoft","product":"office"},{"vendor":"microsoft","product":"office_365_proplus"},{"vendor":"microsoft","product":"office_compatibility_pack"},{"vendor":"microsoft","product":"office_word_viewer"},{"vendor":"microsoft","product":"powerpoint_viewer"},{"vendor":"microsoft","product":"windows server 2008"},{"vendor":"microsoft","product":"windows_server_2008"}],"references":[{"url":"http://www.securitytracker.com/id/1041823","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/105453","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8427","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8427"},{"url":"https://github.com/advisories/GHSA-ch57-57p3-fhm7"}],"sources":{"cve":[{"id":"CVE-2018-8427","description":"An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka \"Microsoft Graphics Components Information Disclosure Vulnerability.\" This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint Viewer, Microsoft Excel Viewer.","status":"published","published":"2018-10-10T13:00:00Z","modified":"2024-08-05T06:54:36.426Z","updated_at":"2026-11-02T14:35:04.540365Z"}],"euvd":[{"id":"EUVD-2018-20063","description":"An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka \"Microsoft Graphics Components Information Disclosure Vulnerability.\" This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint Viewer, Microsoft Excel Viewer.","status":"published","published":"2018-10-10T13:00:00Z","modified":"2024-08-05T06:54:36Z","updated_at":"2026-11-03T02:40:03.169087Z"}],"ghsa":[{"id":"GHSA-ch57-57p3-fhm7","title":"An information disclosure vulnerability exists in the way that Microsoft Graphics Components...","description":"An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka \"Microsoft Graphics Components Information Disclosure Vulnerability.\" This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint Viewer, Microsoft Excel Viewer.","status":"published","published":"2022-05-14T01:56:14Z","modified":"2023-02-02T05:05:01Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:52:00.521272Z"}],"nvd":[{"id":"CVE-2018-8427","description":"An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka \"Microsoft Graphics Components Information Disclosure Vulnerability.\" This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint Viewer, Microsoft Excel Viewer.","status":"published","published":"2018-10-10T13:29:02.167Z","modified":"2026-06-17T02:04:50.81Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:04:44.873741Z"}]}}