CVE-2018-1037

4.3 mediumEPSS 5.8%

An information disclosure vulnerability exists when Visual Studio improperly discloses limited contents of uninitialized memory while compiling program database (PDB) files, aka "Microsoft Visual Studio Information Disclosure Vulnerability." This affects Microsoft Visual Studio.

Severity

CVSS 3.0

4.3 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS: 5.8% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWE: CWE-908
Published: 2018-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:visual_studio
microsoft:visual_studio_2017

References

http://www.securityfocus.com/bid/103715
http://www.securitytracker.com/id/1040664
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1037
http://www.securityfocus.com/bid/103715
http://www.securitytracker.com/id/1040664

Check your stack JSON