CVE-2018-8427: Microsoft Excel Viewer

Medium severity, CVSS 5.5. EPSS: 2.3% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka "Microsoft Graphics Components Information Disclosure Vulnerability." This affects Microsoft Office, Microsoft Office Word Viewer, Office 365 ProPlus, Windows Server 2008, Microsoft PowerPoint Viewer, Microsoft Excel Viewer.

Affected products

• Microsoft Excel Viewer: version 2007 only
• Microsoft Office: version 2016 only; version 2019 only
• Microsoft Office 365 Proplus: affected versions not specified
• Microsoft Office Compatibility Pack: affected versions not specified
• Microsoft Office Word Viewer: affected versions not specified
• Microsoft PowerPoint Viewer: version 2007 only
• Microsoft Windows Server 2008: affected versions not specified

Published 2018-10-10. Last modified 2026-06-17.