Skip to content
7.8 High

CVE-2018-0802 Microsoft Office Memory Corruption Vulnerability

Active exploitation observed

· CISA KEV catalogue
Required action Apply updates per vendor instructions.
Ransomware campaigns Known to be used
Weakness CWE-787

Description

Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.

Affected products and versions

Product Affected versions Fixed in
Equation Editor Versions not published
The 12 CVEs of Equation Editor →
Track this CVE