{"history":[{"alert":0,"cve":"CVE-2018-0802","id":21713,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.93289, \"percentile\": 0.99839}"},{"alert":0,"cve":"CVE-2018-0802","id":19330,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.93289, \"percentile\": 0.99838}"},{"alert":0,"cve":"CVE-2018-0802","id":17296,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.93289, \"percentile\": 0.99837}"},{"alert":0,"cve":"CVE-2018-0802","id":15359,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.93289, \"percentile\": 0.99837}"},{"alert":0,"cve":"CVE-2018-0802","id":13337,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.93289, \"percentile\": 0.99837}"},{"alert":1,"cve":"CVE-2018-0802","id":12717,"kind":"cna","observed_at":1794003600,"payload":"{\"containers\": {\"adp\": [{\"providerMetadata\": {\"dateUpdated\": \"2024-08-05T03:35:49.402Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"], \"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://github.com/rxwx/CVE-2018-0802\"}, {\"name\": \"1040153\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\", \"x_transferred\"], \"url\": \"http://www.securitytracker.com/id/1040153\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html\"}, {\"name\": \"102347\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"], \"url\": \"http://www.securityfocus.com/bid/102347\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://github.com/zldww2011/CVE-2018-0802_POC\"}, {\"tags\": [\"x_refsource_MISC\", \"x_transferred\"], \"url\": \"https://research.checkpoint.com/another-office-equation-rce-vulnerability/\"}], \"title\": \"CVE Program Container\"}, {\"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"LOCAL\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 7.8, \"baseSeverity\": \"HIGH\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"REQUIRED\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\", \"version\": \"3.1\"}}, {\"other\": {\"content\": {\"id\": \"CVE-2018-0802\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-02-07T16:28:56.157400Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2021-11-03\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0802\"}, \"type\": \"kev\"}}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-787\", \"description\": \"CWE-787 Out-of-bounds Write\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T23:45:56.855Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0802\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2021-11-03T00:00:00.000Z\", \"value\": \"CVE-2018-0802 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}], \"cna\": {\"affected\": [{\"product\": \"Equation Editor\", \"vendor\": \"Microsoft Corporation\", \"versions\": [{\"status\": \"affected\", \"version\": \"Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016\"}]}], \"datePublic\": \"2018-01-09T00:00:00.000Z\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \\\"Microsoft Office Memory Corruption Vulnerability\\\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.\"}], \"problemTypes\": [{\"descriptions\": [{\"description\": \"Remote Code Execution\", \"lang\": \"en\", \"type\": \"text\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2020-02-13T18:39:13.000Z\", \"orgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"shortName\": \"microsoft\"}, \"references\": [{\"tags\": [\"x_refsource_CONFIRM\"], \"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://github.com/rxwx/CVE-2018-0802\"}, {\"name\": \"1040153\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\"], \"url\": \"http://www.securitytracker.com/id/1040153\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html\"}, {\"name\": \"102347\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\"], \"url\": \"http://www.securityfocus.com/bid/102347\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://github.com/zldww2011/CVE-2018-0802_POC\"}, {\"tags\": [\"x_refsource_MISC\"], \"url\": \"https://research.checkpoint.com/another-office-equation-rce-vulnerability/\"}], \"x_legacyV4Record\": {\"CVE_data_meta\": {\"ASSIGNER\": \"secure@microsoft.com\", \"DATE_PUBLIC\": \"2018-01-09T00:00:00\", \"ID\": \"CVE-2018-0802\", \"STATE\": \"PUBLIC\"}, \"affects\": {\"vendor\": {\"vendor_data\": [{\"product\": {\"product_data\": [{\"product_name\": \"Equation Editor\", \"version\": {\"version_data\": [{\"version_value\": \"Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016\"}]}}]}, \"vendor_name\": \"Microsoft Corporation\"}]}}, \"data_format\": \"MITRE\", \"data_type\": \"CVE\", \"data_version\": \"4.0\", \"description\": {\"description_data\": [{\"lang\": \"eng\", \"value\": \"Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \\\"Microsoft Office Memory Corruption Vulnerability\\\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.\"}]}, \"problemtype\": {\"problemtype_data\": [{\"description\": [{\"lang\": \"eng\", \"value\": \"Remote Code Execution\"}]}]}, \"references\": {\"reference_data\": [{\"name\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802\", \"refsource\": \"CONFIRM\", \"url\": \"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802\"}, {\"name\": \"https://github.com/rxwx/CVE-2018-0802\", \"refsource\": \"MISC\", \"url\": \"https://github.com/rxwx/CVE-2018-0802\"}, {\"name\": \"1040153\", \"refsource\": \"SECTRACK\", \"url\": \"http://www.securitytracker.com/id/1040153\"}, {\"name\": \"https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html\", \"refsource\": \"MISC\", \"url\": \"https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html\"}, {\"name\": \"102347\", \"refsource\": \"BID\", \"url\": \"http://www.securityfocus.com/bid/102347\"}, {\"name\": \"https://github.com/zldww2011/CVE-2018-0802_POC\", \"refsource\": \"MISC\", \"url\": \"https://github.com/zldww2011/CVE-2018-0802_POC\"}, {\"name\": \"https://research.checkpoint.com/another-office-equation-rce-vulnerability/\", \"refsource\": \"MISC\", \"url\": \"https://research.checkpoint.com/another-office-equation-rce-vulnerability/\"}]}}}}, \"cveMetadata\": {\"assignerOrgId\": \"f38d906d-7342-40ea-92c1-6c4a2c6478c8\", \"assignerShortName\": \"microsoft\", \"cveId\": \"CVE-2018-0802\", \"datePublished\": \"2018-01-10T01:00:00.000Z\", \"dateReserved\": \"2017-12-01T00:00:00.000Z\", \"dateUpdated\": \"2025-10-21T23:45:56.855Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2018-0802","id":11119,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.93289, \"percentile\": 0.99837}"},{"alert":0,"cve":"CVE-2018-0802","id":8865,"kind":"epss","observed_at":1793895600,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.93289, \"percentile\": 0.99837}"},{"alert":0,"cve":"CVE-2018-0802","id":6653,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.93289, \"percentile\": 0.99837}"},{"alert":0,"cve":"CVE-2018-0802","id":4430,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.93289, \"percentile\": 0.99836}"},{"alert":0,"cve":"CVE-2018-0802","id":2212,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.93289, \"percentile\": 0.99836}"},{"alert":1,"cve":"CVE-2018-0802","id":1650,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2018-0802\", \"cwes\": [\"CWE-787\"], \"dateAdded\": \"2021-11-03\", \"dueDate\": \"2022-05-03\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Known\", \"notes\": \"https://nvd.nist.gov/vuln/detail/CVE-2018-0802\", \"product\": \"Office\", \"requiredAction\": \"Apply updates per vendor instructions.\", \"shortDescription\": \"Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0798.\", \"vendorProject\": \"Microsoft\", \"vulnerabilityName\": \"Microsoft Office Memory Corruption Vulnerability\"}"}],"record":{"affected":[{"product":"Equation Editor","vendor":"Microsoft Corporation","versions":[{"status":"affected","version":"Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016"}]}],"cna":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T03:35:49.402Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://github.com/rxwx/CVE-2018-0802"},{"name":"1040153","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id/1040153"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html"},{"name":"102347","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/102347"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://github.com/zldww2011/CVE-2018-0802_POC"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://research.checkpoint.com/another-office-equation-rce-vulnerability/"}],"title":"CVE Program Container"},{"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"}},{"other":{"content":{"id":"CVE-2018-0802","options":[{"Exploitation":"active"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-02-07T16:28:56.157400Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2021-11-03","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0802"},"type":"kev"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-787","description":"CWE-787 Out-of-bounds Write","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2025-10-21T23:45:56.855Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0802"}],"timeline":[{"lang":"en","time":"2021-11-03T00:00:00.000Z","value":"CVE-2018-0802 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"product":"Equation Editor","vendor":"Microsoft Corporation","versions":[{"status":"affected","version":"Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016"}]}],"datePublic":"2018-01-09T00:00:00.000Z","descriptions":[{"lang":"en","value":"Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812."}],"problemTypes":[{"descriptions":[{"description":"Remote Code Execution","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2020-02-13T18:39:13.000Z","orgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","shortName":"microsoft"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802"},{"tags":["x_refsource_MISC"],"url":"https://github.com/rxwx/CVE-2018-0802"},{"name":"1040153","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id/1040153"},{"tags":["x_refsource_MISC"],"url":"https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html"},{"name":"102347","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/102347"},{"tags":["x_refsource_MISC"],"url":"https://github.com/zldww2011/CVE-2018-0802_POC"},{"tags":["x_refsource_MISC"],"url":"https://research.checkpoint.com/another-office-equation-rce-vulnerability/"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secure@microsoft.com","DATE_PUBLIC":"2018-01-09T00:00:00","ID":"CVE-2018-0802","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Equation Editor","version":{"version_data":[{"version_value":"Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016"}]}}]},"vendor_name":"Microsoft Corporation"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Remote Code Execution"}]}]},"references":{"reference_data":[{"name":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802","refsource":"CONFIRM","url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802"},{"name":"https://github.com/rxwx/CVE-2018-0802","refsource":"MISC","url":"https://github.com/rxwx/CVE-2018-0802"},{"name":"1040153","refsource":"SECTRACK","url":"http://www.securitytracker.com/id/1040153"},{"name":"https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html","refsource":"MISC","url":"https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html"},{"name":"102347","refsource":"BID","url":"http://www.securityfocus.com/bid/102347"},{"name":"https://github.com/zldww2011/CVE-2018-0802_POC","refsource":"MISC","url":"https://github.com/zldww2011/CVE-2018-0802_POC"},{"name":"https://research.checkpoint.com/another-office-equation-rce-vulnerability/","refsource":"MISC","url":"https://research.checkpoint.com/another-office-equation-rce-vulnerability/"}]}}}},"cveMetadata":{"assignerOrgId":"f38d906d-7342-40ea-92c1-6c4a2c6478c8","assignerShortName":"microsoft","cveId":"CVE-2018-0802","datePublished":"2018-01-10T01:00:00.000Z","dateReserved":"2017-12-01T00:00:00.000Z","dateUpdated":"2025-10-21T23:45:56.855Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794003600,"cve":"CVE-2018-0802","description":"Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in memory, aka \"Microsoft Office Memory Corruption Vulnerability\". This CVE is unique from CVE-2018-0797 and CVE-2018-0812.","epss":{"date":"2026-11-12","epss":0.93289,"percentile":0.99839},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2018-0802","cwes":["CWE-787"],"dateAdded":"2021-11-03","dueDate":"2022-05-03","forensicTriage":"No","knownRansomwareCampaignUse":"Known","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-0802","product":"Office","requiredAction":"Apply updates per vendor instructions.","shortDescription":"Microsoft Office contains a memory corruption vulnerability due to the way objects are handled in memory. Successful exploitation allows for remote code execution in the context of the current user. This vulnerability is known to be chained with CVE-2018-0798.","vendorProject":"Microsoft","vulnerabilityName":"Microsoft Office Memory Corruption Vulnerability"},"kev_checked":1794522003,"products":"Microsoft Corporation Equation Editor","references":["https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802","https://github.com/rxwx/CVE-2018-0802","http://www.securitytracker.com/id/1040153","https://0patch.blogspot.com/2018/01/the-bug-that-killed-equation-editor-how.html","http://www.securityfocus.com/bid/102347","https://github.com/zldww2011/CVE-2018-0802_POC","https://research.checkpoint.com/another-office-equation-rce-vulnerability/","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-0802"],"score":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"CISA-ADP","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"solutions":"","state":"PUBLISHED","title":"Microsoft Office Memory Corruption Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}