Microsoft · Office
CVE-2018-0798
Microsoft Office Memory Corruption Vulnerability
Was es ist
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".
CISA: Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0802.
Was zu tun ist
Apply updates per vendor instructions.
Frist für US-Bundesbehörden: 3. Mai 2022
Weitere ausgenutzte Schwachstellen von Microsoft
| Hinzugefügt | Schwachstelle | Produkt | Schweregrad | Angriffswahrscheinlichkeit |
|---|---|---|---|---|
| 14.04.2026 | Remote Code Execution | Office | Hoch 8,8 | 43% |
| 10.02.2026 | Word Reliance on Untrusted Inputs in a Security Decision | Office | Hoch 7,8 | 1,6% |
| 26.01.2026 | Security Feature Bypass | Office | Hoch 7,8 | 71% |
| 07.01.2026 | PowerPoint Code Injection | Office | Hoch 8,8 | 67% |
| 12.08.2025 | Excel Remote Code Execution | Office | Hoch 8,8 | 43% |
| 14.03.2023 | Outlook Privilege Escalation | Office | Kritisch 9,8 | 97% |
| 14.02.2023 | Publisher Security Feature Bypass | Office | Hoch 7,3 | 12% |
| 08.06.2022 | Object Record Corruption | Office | Hoch 7,8 | 53% |
Quellen: Known Exploited Vulnerabilities (CISA, gemeinfrei), CVE records (cve.org) und EPSS (FIRST). Die Angriffswahrscheinlichkeit ist die EPSS-Schätzung, dass jemand in den nächsten 30 Tagen versucht, die Schwachstelle auszunutzen.