CVE-2018-0851
Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0852.
Published:Feb 15, 2018
Last Modified:Nov 21, 2024
EPS:Feb 15, 2018
EPSS Score:0.29037
CVSS Score:8.8
Affected Products
Vendor
Product
Action
Vendor
Microsoft
Product
Office
Microsoft
Office
Vendor
Microsoft
Product
Office Word Viewer
Microsoft
Office Word Viewer
Vendor
Microsoft
Product
Outlook
Microsoft
Outlook
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
