CVE-2018-0792

HIGH 8.8CVE-2018-0792 · Published 10/01/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
office microsoft	`= 2016`	No fix yet
office online server microsoft	`= 2016`	No fix yet
sharepoint server microsoft	`= 2016`	No fix yet
word microsoft	`= 2016`	No fix yet

Description

Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0794.

References

securityfocus.com/bid/102381 · Third Party Advisory
securitytracker.com/id/1040153 · Third Party Advisory
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0792 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free