CVE-2018-0795: Critical severity Microsoft Office vulnerability

Published Jan 10, 2018

Updated

Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Office Remote Code Execution Vulnerability".

Affected Software

5 affected components

Microsoft Office=2010-sp2

Microsoft Office=2016

Microsoft Word=2013-sp1

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0795

Event History

Jan 10, 2018

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-0795?

CVE-2018-0795 is classified as a critical remote code execution vulnerability in Microsoft Office products.

How do I fix CVE-2018-0795?

To mitigate CVE-2018-0795, ensure that you apply the latest security updates provided by Microsoft for affected Office versions.

Which Microsoft Office versions are affected by CVE-2018-0795?

CVE-2018-0795 affects Microsoft Office 2010, 2013, and 2016, including specific service packs.

What kind of attacks can exploit CVE-2018-0795?

CVE-2018-0795 can be exploited via specially crafted Office documents that allow remote code execution.

Is there a workaround for CVE-2018-0795?

While Microsoft recommends installing updates, disabling macros in Office applications can serve as a temporary workaround for CVE-2018-0795.