CVE-2018-0950

CVE Database · CVE-2018-0950

CVE-2018-0950

· N/AModified

CVSS v3.1

N/A

EPSS

9.02%

Published

Apr 11, 2018

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a message is opened or previewed, aka "Microsoft Office Information Disclosure Vulnerability." This affects Microsoft Word, Microsoft Office. This CVE ID is unique from CVE-2018-1007.

Affected Products (8)

microsoft · officevulnerable

microsoft · office_compatibility_packvulnerable

microsoft · wordvulnerable

References (6)

http://www.securityfocus.com/bid/103642

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1040654

Third Party AdvisoryVDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0950

PatchVendor Advisory

http://www.securityfocus.com/bid/103642

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1040654

Third Party AdvisoryVDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0950

KEV Catalog EPSS Scores Vendors All CVEs