VYPR
← All advisories
High severity8.8NVD Advisory· Published Jan 10, 2018· Updated Jun 17, 2026

CVE-2018-0792

CVE-2018-0792

Description

Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0794.

Affected products

7
  • Microsoft/Office2 versions
    cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*+ 1 more
    • cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*
    • cpe:2.3:a:microsoft:office:2016:c2r:*:*:*:*:*:*
  • Microsoft/Office Online Server
    cpe:2.3:a:microsoft:office_online_server:2016:*:*:*:*:*:*:*
  • Microsoft/Sharepoint Server
    cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:*:*:*:*
  • Microsoft/Word2 versions
    cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*
    • (no CPE)
  • Microsoft Corporation/Microsoft Wordv5
    Range: Microsoft Word 2016 and Microsoft SharePoint Enterprise Server 2016

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.