CVE-2018-1037

An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio.

• CWE-908

• http://www.securityfocus.com/bid/103715Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040664Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1037Patch, Vendor Advisory
• http://www.securityfocus.com/bid/103715Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040664Third Party Advisory, VDB Entry
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1037Patch, Vendor Advisory

Published

Apr 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-10364BigTree before 4.2.22 has XSS in the Users management page v…
• CVE-2018-10365An XSS issue was discovered in the Threads to Link plugin 1.…
• CVE-2018-10366An issue was discovered in the Users (aka Front-end user man…
• CVE-2018-10367An issue was discovered in WUZHI CMS 4.1.0. The content-mana…
• CVE-2018-10368An issue was discovered in WUZHI CMS 4.1.0. The "Extension M…
• CVE-2018-10369A Cross-site scripting (XSS) vulnerability was discovered on…
• CVE-2018-10371An issue was discovered in the wunderfarm WF Cookie Consent …
• CVE-2018-10372process_cu_tu_index in dwarf.c in GNU Binutils 2.30 allows r…
• CVE-2018-10373concat_filename in dwarf2.c in the Binary File Descriptor (B…
• CVE-2018-10374EasyCMS 1.3 has XSS via the s POST parameter (aka a search b…
• CVE-2018-10375A file uploading vulnerability exists in /include/helpers/up…
• CVE-2018-10376An integer overflow in the transferProxy function of a smart…