VYPR
← All advisories
High severity8.8NVD Advisory· Published Jan 10, 2018· Updated Jun 17, 2026

CVE-2018-0794

CVE-2018-0794

Description

Microsoft Word in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0792.

Affected products

11
  • Microsoft/Office3 versions
    cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2016:*:*:*:*:mac_os_x:*:*
    • cpe:2.3:a:microsoft:office:2016:*:*:*:click-to-run:*:*:*
  • Microsoft/Office Compatibility Pack
    cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
  • Microsoft/Word6 versions
    cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*
    • cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*
    • (no CPE)
  • Microsoft Corporation/Microsoft Wordv5
    Range: Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.