7.8
High
Exploited
· ransomware
CVE-2018-0802 Microsoft Office Memory Corruption Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply updates per vendor instructions.
Ransomware campaigns
Known to be used
Weakness
CWE-787
Description
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Equation Editor | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
- github.com github.com
- 1040153 www.securitytracker.com
- 0patch.blogspot.com 0patch.blogspot.com
- 102347 www.securityfocus.com
- github.com github.com
- research.checkpoint.com research.checkpoint.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Equation Editor
The 12 CVEs of Equation Editor →
CVE-2018-0845
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and…
Not rated
CVE-2018-0862
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and…
Not rated
CVE-2018-0849
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and…
Not rated
CVE-2018-0848
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and…
Not rated