Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0852.
| Software | From | Fixed in |
|---|---|---|
| microsoft / outlook | 2016 | 2016.x |
| microsoft / outlook | 2010-sp2 | 2010-sp2.x |
| microsoft / outlook | 2013-sp1 | 2013-sp1.x |
| microsoft / office | 2007 | 2007.x |
| microsoft / office | 2016 | 2016.x |