ZeroDay Findings
Sign inSign up

Findings

CVE-2018-0798

Microsoft Office Memory Corruption Vulnerability

Published Jan 9, 2018 · updated Jun 16, 2026 · microsoft office

Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0802.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Jan 9, 2018 · Catalog

    Detected

    Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0802.

  2. Nov 3, 2021 · CISA KEV

    Known exploited

    Apply updates per vendor instructions.

  3. May 3, 2022 · CISA KEV

    Remediation due

    Apply updates per vendor instructions.

  4. Jun 16, 2026 · Catalog

    Updated

    Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0802.

Required action

Apply updates per vendor instructions.

CISA due date May 3, 2022

Affected

  • cpe microsoft/office2007
  • cpe microsoft/office2010
  • cpe microsoft/office2013
  • cpe microsoft/office2016
  • cpe microsoft/office compatibility packversion unspecified
  • cpe microsoft/word2007
  • cpe microsoft/word2010
  • vendor Microsoft Officeversion unspecified

Sources

  • CISA KEVConfirmed exploitationCVE-2018-0798

    Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0802.

    cisa.gov
  • CVE.orgVulnerability recordCVE-2018-0798

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2018-0798

    30-day exploitation probability 95.1%

    first.org
  • NIST NVDVulnerability recordCVE-2018-0798

    Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".

    nvd.nist.gov

References