VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Apr 12, 2018· Updated Jun 17, 2026

CVE-2018-0950

CVE-2018-0950

Description

An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a message is opened or previewed, aka "Microsoft Office Information Disclosure Vulnerability." This affects Microsoft Word, Microsoft Office. This CVE ID is unique from CVE-2018-1007.

Affected products

12
  • Microsoft/Office3 versions
    cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2016:*:*:*:click-to-run:*:*:*
    • (no CPE)
  • Microsoft/Office Compatibility Pack
    cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
  • Microsoft/Word7 versions
    cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*
    • cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*
    • (no CPE)range: 2007 Service Pack 3
    • (no CPE)
  • Microsoft/Office Visiocpe-rescue
    Range: 2010 Service Pack 2 (32-bit editions)

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.