High severity8.8NVD Advisory· Published Jan 10, 2018· Updated Jun 17, 2026
CVE-2018-0801
CVE-2018-0801
Description
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Remote Code Execution Vulnerability".
Affected products
13cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office:2016:*:*:*:click-to-run:*:*:*
- (no CPE)range: 2007, 2010, 2013, 2016
- cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:microsoft:word:2007:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*
- cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*
- cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*
- Microsoft Corporation/Equation Editorv5Range: Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016
Patches
Vulnerability mechanics
References
3- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0801nvdPatchVendor Advisory
- www.securityfocus.com/bid/102348nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1040153nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.