CVE-2018-0848
CVE-2018-0848
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 20.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
22 Jan 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Equation Editor in Microsoft Office 2003, Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0805, CVE-2018-0806, and CVE-2018-0807.
Affected products
Microsoft Corporation · Equation EditorWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →