CVE Watch—

CVE-2018-0798

Microsoft Office Memory Corruption Vulnerability

CVSS

—

No CVSS

EPSS

95.1%

p100

KEV

YES

Nov 3, 2021

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

91.0%EPSS · 30 days95.1%

2026-08-022026-08-30

KEV catalog record

Product

Microsoft / Office

Vulnerability

Microsoft Office Memory Corruption Vulnerability

Added to KEV

Nov 3, 2021

Remediate by

May 3, 2022

Known ransomware use

Summary description

Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0802.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-0798

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-217157.3 HIG

95.8%

KEV—79Microsoft Office Publisher Security Feature Bypass Vulnerability12d CVE-2021-422927.8 HIG

98.6%

KEV—80Microsoft Excel Security Feature Bypass11d CVE-2021-386467.8 HIG

94.3%

KEV—78Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability20d CVE-2021-270597.6 HIG

92.9%

KEV—78Microsoft Office Remote Code Execution Vulnerability11d CVE-2017-11882—

100.0%

KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2023-23397—

99.9%

KEV—80Microsoft Office Outlook Privilege Escalation Vulnerability—