VYPR
← All advisories
High severity8.8NVD Advisory· Published Jan 10, 2018· Updated Jun 17, 2026

CVE-2018-0795

CVE-2018-0795

Description

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Remote Code Execution Vulnerability".

Affected products

7
  • Microsoft/Office4 versions
    cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2016:*:*:*:click-to-run:*:*:*
    • (no CPE)range: = 2010, 2013, 2016
  • Microsoft/Word2 versions
    cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*
  • Microsoft Corporation/Microsoft Officev5
    Range: Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.