Low severity3.3NVD Advisory· Published Feb 15, 2018· Updated Jun 17, 2026
CVE-2018-0853
CVE-2018-0853
Description
Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow an information disclosure vulnerability, due to how Office initializes the affected variable, aka "Microsoft Office Information Disclosure Vulnerability".
Affected products
6- Microsoft Corporation/Microsoft Officev5Range: Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R).
2010 SP2, 2013 SP1, 2013 RT SP1, 2016, 2016 Click-to-Run+ 4 more
- (no CPE)range: 2010 SP2, 2013 SP1, 2013 RT SP1, 2016, 2016 Click-to-Run
- cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2016:*:*:*:click-to-run:*:*:*
Patches
Vulnerability mechanics
References
3- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0853nvdPatchVendor Advisory
- www.securityfocus.com/bid/102868nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1040381nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.