CVE-2018-0853

Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow an information disclosure vulnerability, due to how Office initializes the affected variable, aka "Microsoft Office Information Disclosure Vulnerability".

• CWE-665

• http://www.securityfocus.com/bid/102868Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040381Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0853Patch, Vendor Advisory
• http://www.securityfocus.com/bid/102868Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040381Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0853Patch, Vendor Advisory

Published

Feb 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0847Internet Explorer in Microsoft Windows 7 SP1, Windows Server…
• CVE-2018-0848Equation Editor in Microsoft Office 2003, Microsoft Office 2…
• CVE-2018-0849Equation Editor in Microsoft Office 2003, Microsoft Office 2…
• CVE-2018-0850Microsoft Outlook 2007, Microsoft Outlook 2010, Microsoft Ou…
• CVE-2018-0851Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Mic…
• CVE-2018-0852Microsoft Outlook 2007 SP3, Microsoft Outlook 2010 SP2, Micr…
• CVE-2018-0854A security feature bypass vulnerability exists in Windows Sc…
• CVE-2018-0855The Microsoft Windows Embedded OpenType (EOT) font engine in…
• CVE-2018-0856Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 a…
• CVE-2018-0857Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, …
• CVE-2018-0858ChakraCore allows remote code execution, due to how the Chak…
• CVE-2018-0859Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, …