CVE-2018-0802 Microsoft Office
Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0798.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Office Memory Corruption Vulnerability
- Added
- 2021-11-03
- Federal patch deadline
- 2022-05-03
- Ransomware use
- known
Actors known to use it (MITRE ATT&CK)
- Tropic TrooperPirate Panda, KeyBoy · 35 techniques
- BRONZE BUTLERChina · REDBALDKNIGHT, Tick · 33 techniques
- InceptionInception Framework, Cloud Atlas · 20 techniques
- ConfuciusConfucius APT · 16 techniques
- BITTERT-APT-17 · 16 techniques
- Tonto TeamChina · Earth Akhlut, BRONZE HUNTLEY, CactusPete · 14 techniques