CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Office Equation Editor Memory Corruption Remote Code Execution Vulnerability (CVE-2018-0802) Technical Analysis and Hardening Guide
[Affected Scope] Equation Editor (EQNEDT32.EXE) included in Microsoft Office 2007, 2010, 2013, and 2016
[Impact] Remote attackers can execute arbitrary code with the privileges of the logged-in user by enticing them to open a specially crafted document containing malicious OLE objects
[Mitigation] Apply the official Microsoft security patches immediately, or disable the Equation Editor component via registry modification
Microsoft Office Equation Editor Memory Corruption Remote Code Execution Vulnerability (CVE-2018-0798)
[Affected Scope] Equation Editor (EQNEDT32.EXE) component included in Microsoft Office 2007, 2010, 2013, and 2016
[Impact] Remote attackers can execute arbitrary code with the privileges of the logged-in user by tricking them into opening a specially crafted Office document containing malicious OLE objects
[Mitigation] Apply official Microsoft security patches immediately, or disable the legacy Equation Editor component via registry modifications
Microsoft Office Equation Editor Memory Corruption Remote Code Execution Vulnerability (CVE-2017-11882) Technical Advisory
[Affected Scope] Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, 2016, and systems utilizing the legacy Equation Editor (EQNEDT32.EXE) component
[Impact] Successful exploitation allows remote attackers to execute arbitrary code (RCE) in the context of the current user by tricking them into opening a specially crafted Office document
[Mitigation] Apply the official Microsoft security updates immediately, or disable the Equation Editor component via registry modification to prevent execution