CVE-2018-8160: Microsoft Office

Medium severity, CVSS 6.5. EPSS: 8.6% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists in Outlook when a message is opened, aka "Microsoft Outlook Information Disclosure Vulnerability." This affects Word, Microsoft Office.

Affected products

• Microsoft Office: version 2010 only
• Microsoft Office Compatibility Pack: affected versions not specified
• Microsoft SharePoint Server: version 2010 only
• Microsoft Web Applications: version 2010 only

Published 2018-05-09. Last modified 2026-06-17.