microsoft office CVE-2018-0851 vulnerability in Microsoft Products
Published on February 15, 2018

product logo product logo
Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R) allow a remote code execution vulnerability, due to how Office handles objects in memory, aka "Microsoft Office Memory Corruption Vulnerability". This CVE is unique from CVE-2018-0852.

NVD


Products Associated with CVE-2018-0851

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Microsoft Office
 
Microsoft Office Word Viewer
 
Microsoft Outlook
 

Affected Versions

Microsoft Corporation Microsoft Office Version Microsoft Office 2007 SP2, Microsoft Office Word Viewer, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1 and RT SP1, Microsoft Office 2016, and Microsoft Office 2016 Click-to-Run (C2R). is affected by CVE-2018-0851

Exploit Probability

EPSS
30.54%
Percentile
96.61%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.