CVE-2018-0852 is a vulnerability in Microsoft Office that allows attackers to execute arbitrary code on a victim's system. The flaw exists in the way that Microsoft Office handles objects in memory, and can be triggered by opening a specially crafted Office document. If exploited successfully, an attacker could take control of the affected system, install malware, or steal sensitive information.
The vulnerability was first discovered by security researchers at Embedi in January 2018, and Microsoft released a patch to fix the issue in March of the same year. However, it wasn't until April 2018 that the vulnerability received a CVE identifier, which is a unique identifier assigned to publicly disclosed vulnerabilities in software products.
At the time of its discovery, CVE-2018-0852 was considered a serious threat to organizations that use Microsoft Office, as it could allow cybercriminals to gain access to sensitive data. It was recommended that users apply the available patch as soon as possible to mitigate the risk of exploitation.
Description last updated: 2023-06-19T06:18:54.991Z