CVE-2018-0802

Known Exploited Vulnerability Entry External Catalog

Entry Details

CVE-2018-0802

Confirmed

Yes

2021-11-03 00:00 UTC


Timestamps

2021-11-03

2021-11-03


Scope

KEV entry: Microsoft Office Memory Corruption Vulnerability | Affected: Microsoft / Office | Description: Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0798. | Required action: Apply updates per vendor instructions. | Due date: 2022-05-03 | Known ransomware campaign use (KEV): Unknown | Notes (KEV): https://nvd.nist.gov/vuln/detail/CVE-2018-0802


References
  • {'id': 'CVE-2018-0802', 'url': 'https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-0802'}

33625eb0-5f8b-4f73-adbf-4b8e031f7713

405284c2-e461-4670-8979-7fd2c9755a60

2026-02-02 13:26 UTC

2026-02-06 07:53 UTC

Evidence (1)
Type Source Signal Confidence Details GCVE Metadata
vendor_report cisa-kev successful_exploitation 0.80
View details
{
  "cwes": [
    "CWE-787"
  ],
  "date_added": "2021-11-03",
  "due_date": "2022-05-03",
  "feed": "CISA Known Exploited Vulnerabilities Catalog",
  "knownRansomwareCampaignUse": "Unknown",
  "product": "Office",
  "vendorProject": "Microsoft",
  "vulnerabilityName": "Microsoft Office Memory Corruption Vulnerability"
}
-