GCVE-110-CERTCC-2018-974272

Advisory PublishedCVSS 5.0/10

Vulnetix · Advisory published April 10, 2018

When a Rich Text (RTF) email is previewed in Microsoft Outlook, remotely-hosted OLE content is retrieved without requiring any additional user interaction. This can leak private information including the user's password hash, which may be cracked by an attacker.

Download JSON Open in Console

Risk Scores

CVSS 2.0

5.0/10

Medium · AV:N/AC:L/Au:N/C:P/I:N/A:N

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population4d1_direct_report1

certcc-cvss-temporal-env

temporal_score4.1remediation_levelOFreport_confidenceNDenvironmental_score4.09815985068target_distributionHenvironmental_vectorCDP:ND/TD:H/CR:ND/IR:ND/AR:ND

Aliases

CVE-2018-0950

References

Microsoft Outlook retrieves remote OLE content without prompting

advisory

Microsoft Outlook retrieves remote OLE content without prompting

advisory

Microsoft Outlook retrieves remote OLE content without prompting

advisory

Browse GCVE Records

73,442 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON