CVE-2018-0950: Microsoft Office

Medium severity, CVSS 6.5. EPSS: 8.9% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists when Office renders Rich Text Format (RTF) email messages containing OLE objects when a message is opened or previewed, aka "Microsoft Office Information Disclosure Vulnerability." This affects Microsoft Word, Microsoft Office. This CVE ID is unique from CVE-2018-1007.

Affected products

• Microsoft Office: version 2010 only; version 2016 only
• Microsoft Office Compatibility Pack: affected versions not specified
• Microsoft Word: version 2007 only; version 2010 only; version 2013 only; version 2016 only

Published 2018-04-12. Last modified 2026-06-17.