Microsoft Office Memory Corruption Vulnerability

Description

References

• securityfocus.com/bid/102347 · Broken Link
• securitytracker.com/id/1040153 · Broken Link
• 0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html · Exploit
• rxwx/CVE-2018-0802 · Exploit
• zldww2011/CVE-2018-0802_POC · Third Party Advisory
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 · Patch
• research.checkpoint.com/another-office-equation-rce-vulnerability · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2018-0802

office 的其他漏洞

• CVE-2026-70105高危 7.5Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.
• CVE-2026-55054中危 6.5Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
• CVE-2026-47293高危 7.0Use after free in Microsoft Office Click-To-Run allows an authorized attacker to elevate privileges locally.
• CVE-2026-42832中危 5.5Improper access control in Microsoft Office allows an unauthorized attacker to perform spoofing locally.
• CVE-2026-42831高危 7.8Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.