Microsoft · Office
CVE-2018-0798
Microsoft Office Memory Corruption Vulnerability
O que é
Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Memory Corruption Vulnerability".
CISA: Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0802.
O que fazer
Apply updates per vendor instructions.
Prazo para as agências federais dos EUA: 3 de maio de 2022
Mais falhas exploradas de Microsoft
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 14 de abr. de 2026 | Remote Code Execution | Office | Alto 8,8 | 43% |
| 10 de fev. de 2026 | Word Reliance on Untrusted Inputs in a Security Decision | Office | Alto 7,8 | 1,6% |
| 26 de jan. de 2026 | Security Feature Bypass | Office | Alto 7,8 | 71% |
| 7 de jan. de 2026 | PowerPoint Code Injection | Office | Alto 8,8 | 67% |
| 12 de ago. de 2025 | Excel Remote Code Execution | Office | Alto 8,8 | 43% |
| 14 de mar. de 2023 | Outlook Privilege Escalation | Office | Crítica 9,8 | 97% |
| 14 de fev. de 2023 | Publisher Security Feature Bypass | Office | Alto 7,3 | 12% |
| 8 de jun. de 2022 | Object Record Corruption | Office | Alto 7,8 | 53% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.