CVE-2018-0792: Critical severity microsoft office for mac os x vulnerability

Published Jan 10, 2018

Updated

Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0794.

Affected Software

5 affected components

Microsoft Office Mac Os X=2016

Microsoft Office=2016-c2r

Microsoft Office Online Server=2016

Microsoft SharePoint Server=2016

Microsoft Word=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0792

Event History

Jan 10, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0792?

CVE-2018-0792 has a critical severity rating due to its potential for remote code execution.

How do I fix CVE-2018-0792?

To mitigate CVE-2018-0792, it is recommended to apply the latest security updates issued by Microsoft.

What versions of Microsoft Office are affected by CVE-2018-0792?

CVE-2018-0792 affects Microsoft Office 2016, Microsoft Word 2016, Microsoft Office Online Server 2016, and SharePoint Server 2016.

Can CVE-2018-0792 allow an attacker to execute arbitrary code?

Yes, CVE-2018-0792 enables an attacker to execute arbitrary code if a victim opens a specially crafted document.

Is there a workaround for CVE-2018-0792?

Yes, disabling the automatic execution of macros in Microsoft Word can serve as a temporary workaround for CVE-2018-0792.