CVE-2018-1007

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-04-12 · updated 2026-06-17

Description

An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory, aka "Microsoft Office Information Disclosure Vulnerability." This affects Microsoft Office. This CVE ID is unique from CVE-2018-0950.

Affected products

Microsoft Office: 2016

References

http://www.securityfocus.com/bid/103640
http://www.securitytracker.com/id/1040654
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1007
http://www.securityfocus.com/bid/103640
http://www.securitytracker.com/id/1040654
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1007

Get alerted when CVE-2018-1007 or the next vulnerability affects your stack