Microsoft Word 2016 in Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in memory, aka "Microsoft Word Remote Code Execution Vulnerability". This CVE is unique from CVE-2018-0794.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Microsoft Office | — | Download and install Microsoft KB4011643 | Jun 20, 2023 | Jan 10, 2018 |
| Microsoft Sharepoint | — | Download and install Microsoft KB4011642 | May 15, 2023 | Jan 10, 2018 |
| Msft | — | Security Update for Microsoft Office Online Server (KB4011021) farm-deploymentSecurity Update for Microsoft Office Online Server (KB4011022) farm-deployment | Jan 9, 2018 | Jan 9, 2018 |
| Office For Mac | — | Upgrade to Office for Mac version 16.9.0 | Jan 9, 2018 | Jan 9, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub