Medium severity6.5NVD Advisory· Published Nov 14, 2018· Updated Jun 17, 2026

CVE-2018-8579

Description

An information disclosure vulnerability exists when attaching files to Outlook messages, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8558.

Affected products

Microsoft/Office3 versions
cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 365 ProPlus for 32-bit Systems
Microsoft/Office 365 Proplus2 versions
cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*
- (no CPE)
Microsoft/Outlookllm-fuzzy
Microsoft/Office Visiocpe-rescue
Range: 2019 for 32-bit editions

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8579nvdPatchVendor Advisory
www.securityfocus.com/bid/105828nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1042132nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.005
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000