CVE-2018-0853
Low · 3.3CVSS
3.3
EPSS
11.8%
Published
Feb 15, 2018
CISA due date
—
The record
Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow an information disclosure vulnerability, due to how Office initializes the affected variable, aka "Microsoft Office Information Disclosure Vulnerability".
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-103394 An Improper Initialization vulnerability in the SSR software in Juniper Networks Session… CWE-665
- CVE-2026-116115 A security vulnerability has been detected in Yoosee GM8135S Camera 21.00.01.36. CWE-665
- CVE-2026-87616 Improper initialization in Views in Google Chrome on on Windows prior to 153.0.8010.36… CWE-665
- CVE-2026-78940 Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a… CWE-665
- CVE-2026-12233 The PSA Protected Storage credential backend (subsys/net/lib/tls_credentials/tls_credenti… CWE-665
- CVE-2026-44434 Quicly is an IETF QUIC protocol implementation intended primarily for use within the H2O… CWE-665
- CVE-2026-54777 CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET… CWE-665
- CVE-2026-54409 A malicious actor with access to the network and under certain conditions could exploit… CWE-665