CVE-2018-1027

7.8 highEPSS 19%

A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "Microsoft Excel Remote Code Execution Vulnerability." This affects Microsoft Excel, Microsoft Office. This CVE ID is unique from CVE-2018-0920, CVE-2018-1011, CVE-2018-1029.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 19% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
Published: 2018-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:excel
microsoft:office_compatibility_pack

References

http://www.securityfocus.com/bid/103616
http://www.securitytracker.com/id/1040652
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-1027
http://www.securityfocus.com/bid/103616
http://www.securitytracker.com/id/1040652

Check your stack JSON