CVE-2018-0841

—

CVSS 3.0

8.8 high

EPSS

20%p97

Published

Feb 15, 2018 (Feb 15, 2018)

Modified

Jun 17, 2026

Description

Microsoft Office 2016 Click-to-Run allows a remote code execution vulnerability due to how objects are handled in memory, aka "Office Remote Code Execution Vulnerability"

Vendors: microsoft
Products: office
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (20.1%)

In the news1 stories

Microsoft Patch Tuesday

Cisco TalosFeb 13, 21:26 UTC · Feb 13, 2018Vulnerability CVE-2018-0852 CVE-2018-0763 CVE-2018-0825+49 CVEs