Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 15, 2018 · NIST NVD

   Detected

   Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0852.

2. Oct 15, 2026 · NIST NVD

   Updated

   Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0852.

Affected

• cpe microsoft/office2007
• cpe microsoft/office2016
• cpe microsoft/office word viewerversion unspecified
• cpe microsoft/outlook2010
• cpe microsoft/outlook2013
• cpe microsoft/outlook2016

Sources

• CVE.orgVulnerability recordCVE-2018-0851

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2018-0851

  Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory,

  nvd.nist.gov

References

• Third Party Advisory · securityfocus.com
• Third Party Advisory · securitytracker.com
• Patch · portal.msrc.microsoft.com