CVE-2018-1028

EPSS 19.1%

Vexday Risk Score

8Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 19.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

12 Apr 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts, aka "Microsoft Office Graphics Remote Code Execution Vulnerability." This affects Word, Microsoft Office, Microsoft SharePoint, Excel, Microsoft SharePoint Server.

Affected products

Microsoft · Excel Microsoft · Microsoft Office Microsoft · Microsoft SharePoint Microsoft · Microsoft SharePoint Server Microsoft · Word

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1028 http://www.securityfocus.com/bid/103641 http://www.securitytracker.com/id/1040654