CVE-2018-0798
Microsoft Office Memory Corruption Vulnerability
CVSS
—
Sin CVSS
EPSS
95.1%
p100
KEV
SÍ
3 nov 2021
Exploit Today
80
0-100
Publicado: — · Última mod.: —
91.0%EPSS · 30 días95.1%
2026-08-022026-08-30
Producto
Microsoft / Office
Vulnerabilidad
Microsoft Office Memory Corruption Vulnerability
Añadido a KEV
3 nov 2021
Remediar antes de
3 may 2022
Uso conocido en ransomware
No
Descripción resumida
Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0802.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2018-0798
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2023-217157.3 ALT95.8%
KEV—79Microsoft Office Publisher Security Feature Bypass Vulnerability12dCVE-2021-422927.8 ALT98.6%
KEV—80Microsoft Excel Security Feature Bypass11dCVE-2021-386467.8 ALT94.3%
KEV—78Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability20dCVE-2021-270597.6 ALT92.9%
KEV—78Microsoft Office Remote Code Execution Vulnerability11dCVE-2017-11882—100.0%
KEV—80Microsoft Office Memory Corruption Vulnerability—CVE-2023-23397—99.9%
KEV—80Microsoft Office Outlook Privilege Escalation Vulnerability—