CVE-2018-0802

A memory corruption flaw in Microsoft Office allowed remote code execution when chained with another vulnerability, and was actively exploited in the wild.

Microsoft Office contained a memory corruption vulnerability that, when chained with CVE-2018-0798, enabled remote code execution in the context of the current user. This flaw was actively exploited in the wild and is listed in CISA's KEV catalog, indicating it was successfully used by adversaries. DIB organizations must ensure all Office applications are patched to the latest versions and monitor for exploitation attempts, as unpatched systems remain a high-risk attack vector for ransomware and data breaches.

Shame score — The vulnerability was actively exploited in the wild and chained with another flaw to achieve remote code execution, demonstrating a significant gap in Microsoft's patch management and threat detection that allowed adversaries to compromise systems.