EXPOSURES › CVE-2018-0798
CVE-2018-0798
HIGH ⌖ ON CISA KEV · EXPLOITEDMicrosoft Office memory corruption flaw allows remote code execution and is actively exploited in the wild.
A memory corruption vulnerability in Microsoft Office enables remote code execution, and it is known to be chained with CVE-2018-0802. This flaw is listed in CISA's KEV catalog, indicating it is actively exploited in the wild. DIB organizations must ensure all Office applications are patched to prevent attackers from executing arbitrary code on their systems.
Shame score — A known memory corruption vulnerability in a widely deployed product like Microsoft Office that is actively exploited in the wild represents a severe, avoidable risk that DIB organizations must mitigate through timely patching.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0802.
| PRODUCT | STATUS |
|---|---|
| Azure Commercial Cloud Microsoft |
Authorized |
| Azure Government (includes Dynamics 365) Microsoft |
Authorized |
| Microsoft Office 365 GCC High Microsoft |
In Process |
| Office 365 Multi-Tenant & Supporting Services Microsoft |
Authorized |