In CISA KEVNot scoredRansomware use
CVE-2018-0802
Microsoft Office Memory Corruption Vulnerability
MicrosoftOffice
Status
- Exploited in the wild
- In CISA KEV since 3 Nov 2021
- Known ransomware use
Federal deadlineTue 3 May 2022, 23:59 UTC
Passed 1635 days ago
CISA KEV · added 3 Nov 2021
Exploit probabilityEPSSchecked 25 Oct
93%probability of exploitation in the next 30 days
Higher than 100% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.
CISA required action
Apply updates per vendor instructions.
Coverage 1 article · 1 outlet
- Excel Trap: New Phishing Campaign Deploys Fileless XWorm RATSecurityOnline · first in our coverage