CVE-2018-0919: Microsoft Office 2010 SP2, 2013 SP1, and 2016, Microsoft Office 2016 Click-to-Run Microsoft Office 2016 for...

Security readout for executives and security teams

CVE-2018-0919 is a Microsoft Office and SharePoint information disclosure issue caused by variable initialization behavior. The provided sources do not describe what data may leak, how reliable exploitation is, or whether attackers are using it. Treat it as a legacy Microsoft productivity-platform exposure that should be resolved through vendor guidance and patch verification. Organizations may be exposed if they still run the listed legacy Office, Word, Office Web Apps, or SharePoint versions without the relevant Microsoft security update. Internet-facing SharePoint or Office Web Apps deployments deserve priority inventory because the affected surface may be server-side as well as desktop-side. Medium operational priority unless new evidence of exploitation appears. The main business concern is lingering legacy Microsoft software that may disclose sensitive information. Confirm patch status and reduce unsupported product exposure rather than treating this as an emergency based on the provided evidence. Mitigation focus: Review the Microsoft MSRC advisory for vendor-provided updates and applicability.; Patch affected Office, Word, Office Web Apps, and SharePoint installations where applicable.; Prioritize retirement or isolation of unsupported Office and SharePoint versions..

Prepared

Jun 7, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.