Vulnerability Database

296,733

Total vulnerabilities in the database

CVE-2018-0797

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way RTF content is handled, aka "Microsoft Word Memory Corruption Vulnerability".

Published: Jan 10, 2018
Updated: Apr 13, 2023
CVE: CVE-2018-0797
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.8
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2:

Severity: High
Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C

CWEs:

CWE-787

Affected Software
References

Software	From	Fixed in
microsoft / word	2013-sp1	2013-sp1.x
microsoft / word	2016	2016.x
microsoft / office_web_apps	2010-sp2	2010-sp2.x
microsoft / office_compatibility_pack	--sp3	--sp3.x
microsoft / sharepoint_server	2010-sp2	2010-sp2.x
microsoft / office	2010-sp2	2010-sp2.x
microsoft / office_web_apps_server	2013-sp1	2013-sp1.x
microsoft / sharepoint_enterprise_server	2016	2016.x
microsoft / word	2010-sp2	2010-sp2.x
microsoft / word_viewer	-	-
microsoft / office_web_apps	2010	2010.x
microsoft / office_online_server	2016	2016.x
microsoft / word	2007-sp3	2007-sp3.x
microsoft / sharepoint_enterprise_server	2013-sp1	2013-sp1.x
microsoft / office	2016	2016.x

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime