DEV Community

Cover image for CVE-2018-0802: Microsoft Office Memory Corruption Vulnerability
Freedom Coder
Freedom Coder

Posted on • Originally published at scyscan.com

CVE-2018-0802: Microsoft Office Memory Corruption Vulnerability

CVE ID

CVE-2018-0802

Vulnerability Name

Microsoft Office Memory Corruption Vulnerability

  • Project: Microsoft
  • Product: Office

Date

  • Date Added: 2021-11-03
  • Due Date: 2022-05-03

Description

Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0798.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply updates per vendor instructions.

Additional Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-0802

Related Security News

More CVEs Info

Common Vulnerabilities & Exposures (CVE) List

Top comments (0)