CVE-2018-8627

CVE-2018-8627 is an information disclosure vulnerability in Microsoft Excel, Office, and related products, where an uninitialized variable leads to out-of-bounds memory reads, potentially disclosing memory contents. With a CVSS score of 5.5 (Medium), it requires user interaction (UI:R) to exploit, but has a high impact on confidentiality (C:H). While not listed in CISA's KEV catalog, its EPSS score and FAUCET Risk Score indicate a notable potential for exploitation. There is no public exploit code available, and community discussion and media coverage are minimal, suggesting limited active exploitation or public awareness.